Which AWS service requires the customer to patch the guest operating system
|
This part include 100% real AWS Certified Cloud Practitioner (CLF-C01) Exam Questions. It’s free for all and we highly recommend you should use this for your exam preparation. Show
For PDF Format: Video: 1. How can a company separate costs for network traffic, Amazon EC2, Amazon S3, and other AWS services by department? A. Add department-specific tags to each resource Reveal Answer: C 2. What is a benefit of consolidated billing for AWS accounts? A. Access to AWS Personal Health Dashboard Reveal Answer: B 3. Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded? A. AWS Organizations Reveal Answer: B 4. Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data? A. Amazon GuardDuty Reveal Answer: C 5. Which tool can be used to monitor AWS service limits? A. AWS Total Cost of Ownership (TCO) Calculator Reveal Answer: B 6. A company has distributed its workload on both the AWS Cloud and some on-premises servers. What type of architecture is this? A. Virtual private network Reveal Answer: C 7. Which of the following describes a security best practice that can be implemented using AWS IAM? A. Disable AWS Management Console access for all users Reveal Answer: C 8. What can be used to automate and manage secure, well-architected, multi-account AWS environments? A. AWS shared responsibility model Reveal Answer: B 9. Which AWS service or feature allows a user to easily scale connectivity among thousands of VPCs? A. VPC peering Reveal Answer: B 10. A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements? A. AWS Shield Advanced Reveal Answer: A 11. Which AWS service or feature helps restrict the AWS services, resources, and individual API actions the users and roles in each member account can access? A. Amazon Cognito Reveal Answer: B 12. What is the best resource for a user to find compliance-related information and reports about AWS? A. AWS Artifact Reveal Answer: A 13. Which Amazon S3 storage class is optimized to provide access to data with lower resiliency requirements, but rapid access when needed such as duplicate backups? A. Amazon S3 Standard Reveal Answer: C 14. What is an Availability Zone in AWS? A. One or more physical data centers Reveal Answer: A 15. Which AWS services can be used as infrastructure automation tools? (Choose two.) A. AWS CloudFormation Reveal Answer: A D 16. Which AWS service enables users to create copies of resources across AWS Regions? A. Amazon ElastiCache Reveal Answer: B 17. A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability? A. AWS Secrets Manager Reveal Answer: C 18. Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage? A. Easy and fast deployment of applications in multiple Regions around the world Reveal Answer: C 19. What credential components are required to gain programmatic access to an AWS account? (Choose two.) A. An access key ID Reveal Answer: A C 20. Which of the following are AWS compute services? (Select two.) A. Amazon Lightsail Reveal Answer: A D 21. What is the MINIMUM AWS Support plan level that will provide users with access to the AWS Support API? A. Developer Reveal Answer: C 22. A company has deployed several relational databases on Amazon EC2 instances. Every month, the database software vendor releases new security patches that need to be applied to the databases. What is the MOST efficient way to apply the security patches? A. Connect to each database instance on a monthly basis, and download and apply the necessary security patches from the vendor. Reveal Answer: D 23. A company wants to use Amazon Elastic Compute Cloud (Amazon EC2) to deploy a global commercial application. The deployment solution should be built with the highest redundancy and fault tolerance. Based on this situation, the Amazon EC2 instances should be deployed: A. in a single Availability Zone in one AWS Region Reveal Answer: D 24. A company has an application with users in both Australia and Brazil. All the company infrastructure is currently provisioned in the Asia Pacific (Sydney) Region in Australia, and Brazilian users are experiencing high latency. What should the company do to reduce latency? A. Implement AWS Direct Connect for users in Brazil Reveal Answer: B 25. An Amazon EC2 instance runs only when needed yet must remain active for the duration of the process. What is the most appropriate purchasing option? A. Dedicated Instances Reveal Answer: C 26. Which AWS dashboard displays relevant and timely information to help users manage events in progress, and provides proactive notifications to help plan for scheduled activities? A. AWS Service Health Dashboard Reveal Answer: B 27. Which AWS hybrid storage service enables a user’s on-premises applications to seamlessly use AWS Cloud storage? A. AWS Backup Reveal Answer: D 28. Which of the following acts as a virtual firewall at the Amazon EC2 instance level to control traffic for one or more instances? A. Access keys Reveal Answer: C 29. What is the most efficient way to establish network connectivity from on-premises to multiple VPCs in different AWS Regions? A. Use AWS Direct Connect Reveal Answer: D 30. Which AWS Support plan provides access to architectural and operational reviews, as well as 24/7 access to Senior Cloud Support Engineers through email, online chat, and phone? A. Basic Reveal Answer: D 31. Which of the AWS global infrastructure is used to cache copies of content for faster delivery to users across the globe? A. AWS Regions Reveal Answer: C 32. Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar? A. Security Reveal Answer: A 33. A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database software. Which AWS service can be used to accomplish this? A. Amazon RDS Reveal Answer: D 34. A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic area. Which of the following meets these requirements? A. AWS Accounts Reveal Answer: B 35. Which features and benefits does the AWS Organizations service provide? (Choose two.) A. Establishing real-time communications between members of an internal team Reveal Answer: D E 36. Which AWS service is used to automate configuration management using Chef and Puppet? A. AWS Config Reveal Answer: B 37. Which tool is best suited for combining the billing of AWS accounts that were previously independent from one another? A. Detailed billing report Reveal Answer: B 38. The AWS Total Cost of Ownership (TCO) Calculator is used to: A. receive reports that break down AWS Cloud compute costs by duration, resource, or tags Reveal Answer: B 39. Which AWS services can be used to provide network connectivity between an on-premises network and a VPC? (Choose two.) A. Amazon Route 53 Reveal Answer: B D 40. Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.) A. Setting up server-side encryption on an Amazon S3 bucket Reveal Answer: C E 41. Which method helps to optimize costs of users moving to the AWS Cloud? A. Paying only for what is used Reveal Answer: A 42. Under the AWS shared responsibility model, which of the following is a customer responsibility? A. Installing security patches for the Xen and KVM hypervisors Reveal Answer: C 43. The AWS Cost Management tools give users the ability to do which of the following? (Choose two.) A. Terminate all AWS resources automatically if budget thresholds are exceeded. Reveal Answer: B C 44. Under the AWS shared responsibility model, the security and patching of the guest operating system is the responsibility of: A. AWS Support Reveal Answer: B 45. Which AWS service makes it easy to create and manage AWS users and groups, and provide them with secure access to AWS resources at no charge? A. AWS Direct Connect Reveal Answer: C 46. Which AWS service provides on-demand of AWS security and compliance documentation? A. AWS Directory Service Reveal Answer: B 47. Which AWS service can be used to turn text into life-like speech? A. Amazon Polly Reveal Answer: A 48. What is one of the core principles to follow when designing a highly available application in the AWS Cloud? A. Design using a serverless architecture Reveal Answer: B 49. A user needs to generate a report that outlines the status of key security checks in an AWS account. The report must include: A. Amazon QuickSight dashboard Reveal Answer: C 50. Which Amazon EC2 pricing model should be used to comply with per-core software license requirements? A. Dedicated Hosts Reveal Answer: A 51. What is the benefit of elasticity in the AWS Cloud? A. Ensure web traffic is automatically spread across multiple AWS Regions. Reveal Answer: D 52. The continual reduction of AWS Cloud pricing is due to: A. pay-as-you go pricing Reveal Answer: C 53. A company needs an Amazon S3 bucket that cannot have any public objects due to compliance requirements. How can this be accomplished? A. Enable S3 Block Public Access from the AWS Management Console. Reveal Answer: C 54. A Cloud Practitioner identifies a billing issue after examining the AWS Cost and Usage report in the AWS Management Console. Which action can be taken to resolve this? A. Open a detailed case related to billing and submit it to AWS Support for help. Reveal Answer: A 55. What does the AWS Simple Monthly Calculator do? A. Compares on-premises costs to colocation environments Reveal Answer: B 56. Who is responsible for patching the guest operating system for Amazon RDS? A. The AWS Product team Reveal Answer: B 57. Which AWS services may be scaled using AWS Auto Scaling? (Choose two.) A. Amazon EC2 Reveal Answer: A B 58. Which of the following are benefits of AWS Global Accelerator? (Choose two.) A. Reduced cost to run services on AWS Reveal Answer: B D 59. A user who wants to get help with billing and reactivate a suspended account should submit an account and billing request to: A. the AWS Support forum Reveal Answer: D 60. Which AWS Cloud best practice uses the elasticity and agility of cloud computing? A. Provision capacity based on past usage and theoretical peaks Reveal Answer: D 61. Which tool is used to forecast AWS spending? A. AWS Trusted Advisor Reveal Answer: C 62. A company is running an ecommerce application hosted in Europe. To decrease latency for users who access the website from other parts of the world, the company would like to cache frequently accessed static content closer to the users. Which AWS service will support these requirements? A. Amazon ElastiCache Reveal Answer: B 63. Which of the following is a component of the AWS Global Infrastructure? A. Amazon Alexa Reveal Answer: B 64. Which AWS service will help users determine if an application running on an Amazon EC2 instance has sufficient CPU capacity? A. Amazon CloudWatch Reveal Answer: A 65. Why is it beneficial to use Elastic Load Balancers with applications? A. They allow for the conversion from Application Load Balancers to Classic Load Balancers. Reveal Answer: B 66. Which tasks are the customer’s responsibility in the AWS shared responsibility model? (Choose two.) A. Infrastructure facilities access management Reveal Answer: C E 67. IT systems should be designed to reduce interdependencies, so that a change or failure in one component does not cascade to other components. This is an example of which principle of cloud architecture design? A. Scalability Reveal Answer: B 68. Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Choose two.) A. AWS WAF Reveal Answer: A E 69. An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously. Which AWS storage service should be used? A. Amazon EBS Reveal Answer: B 70. A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS? (Choose two.) What is guest OS in AWS?Guest Operating System: Virtual instances are completely controlled by you, the customer. You have full root access or administrative control over accounts, services, and applications. AWS does not have any access rights to your instances or the guest OS.
For which of the following AWS resources the customer is responsible for the infrastructure related security configurations?Infrastructure management and configuration is the responsibility of AWS. However, Configuration management and patching of the virtual machines and the applications is the customer's responsibility. 21.
Which of these types of operating systems will we see in AWS?AWS OpsWorks Stacks supports the 64-bit versions of the following Linux operating systems.. Amazon Linux (see the AWS OpsWorks Stacks console for the currently supported versions). Ubuntu 14.04 LTS.. Ubuntu 16.04 LTS.. Ubuntu 18.04 LTS.. CentOS 7.. Red Hat Enterprise Linux 7.. Which AWS service or feature allows the user to manage cross region application Traffic 1 point?The Amazon Route 53 Traffic Flow simple visual editor allows you to manage how your end users are routed to your application's endpoints—whether in a single AWS Region or distributed around the globe.
|
