Amazon AWS Certified Cloud Practitioner

AWS Certified Cloud Practitioner (CLF-C01)

Enrolling now you will get access to 328 questions in a unique set of AWS
Certified Cloud Practitioner dumps

Which AWS services can use AWS WAF to protect against common web exploitations? (Select TWO.)

Question 1
Which AWS services can use AWS WAF to protect against common web exploitations? (Select TWO.)

Options:

A. Amazon Route 53

B. Amazon CloudFront

C. AWS Transfer Family

D. AWS Site-to-Site VPN

E. Amazon API Gateway

Answer: B, E

Explanation:
e deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API
Gateway, and AWS AppSync. As part of Amazon CloudFront it can be part of your Content
Distribution Network (CDN) protecting your resources and content at the Edge locations.
Explanation:

A company needs a centralized, secure way to create and manage cryptographic keys. The company
will use the keys across a wide range of AWS services and applications. The company needs to track
and document when the keys are created, used, and deleted.
Which AWS service or feature will meet these requirements?

Question 2
A company needs a centralized, secure way to create and manage cryptographic keys. The company

https://www.certification-questions.com
Amazon AWS Certified Cloud Practitioner

will use the keys across a wide range of AWS services and applications. The company needs to track
and document when the keys are created, used, and deleted.
Which AWS service or feature will meet these requirements?

Options:

A. AWS Secrets Manager

B. AWS License Manager

C. AWS Systems Manager Parameter Store

D. AWS Key Management Service (AWS KMS)

Answer: D

Explanation:
ement Service (AWS KMS) makes it easy for you to create and manage cryptographic
keys and control their use across a wide range of AWS services and in your applications. AWS KMS is
a secure and resilient service that uses hardware security modules that have been validated under
FIPS 140-2, or are in the process of being validated, to protect your keys. AWS KMS is integrated with
AWS CloudTrail to provide you with logs of all key usage to help meet your regulatory and
compliance needs.
Explanation:

A company runs a web application on Amazon EC2 instances. The application must run constantly
and is expected to run indefinitely without interruption.
Which EC2 instance purchasing options will meet these requirements MOST cost-effectively? (Select
TWO.)

Question 3
A company runs a web application on Amazon EC2 instances. The application must run constantly
and is expected to run indefinitely without interruption.
Which EC2 instance purchasing options will meet these requirements MOST cost-effectively? (Select
TWO.)

Options:

A. On-Demand Instances

B. Spot Instances.

C. Reserved Instances

D. Savings Plans

E. Dedicated Hosts

Answer: C, D

https://www.certification-questions.com
Amazon AWS Certified Cloud Practitioner

Explanation:
ovides the following purchasing options to enable you to optimize your costs based on
your needs:
*On-Demand Instances – Pay, by the second, for the instances that you launch.
*Savings Plans – Reduce your Amazon EC2 costs by making a commitment to a consistent amount of
usage, in USD per hour, for a term of 1 or 3 years.
*Reserved Instances – Reduce your Amazon EC2 costs by making a commitment to a consistent
instance configuration, including instance type and Region, for a term of 1 or 3 years.
*Spot Instances – Request unused EC2 instances, which can reduce your Amazon EC2 costs
significantly.
*Dedicated Hosts – Pay for a physical host that is fully dedicated to running your instances, and bring
your existing per-socket, per-core, or per-VM software licenses to reduce costs.
*Dedicated Instances – Pay, by the hour, for instances that run on single-tenant hardware.
*Capacity Reservations – Reserve capacity for your EC2 instances in a specific Availability Zone for
any duration.
If you require a capacity reservation, purchase Reserved Instances or Capacity Reservations for a
specific Availability Zone. Spot Instances are a cost-effective choice if you can be flexible about when
your applications run and if they can be interrupted. Dedicated Hosts or Dedicated Instances can
help you address compliance requirements and reduce costs by using your existing server-bound
software licenses.
Explanation:

Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic
regions connected by a network with low latency, high throughput, and redundancy?

Question 4
Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic
regions connected by a network with low latency, high throughput, and redundancy?

Options:

A. Economies of scale

B. Security

C. Elasticity

D. Global reach

Answer: C

Explanation:
l Cloud Infrastructure is the most secure, extensive, and reliable cloud platform,
offering over 200 fully featured services from data centers globally. Whether you need to deploy your
application workloads across the globe in a single click, or you want to build and deploy specific
applications closer to your end-users with single-digit millisecond latency, AWS provides you the

https://www.certification-questions.com
Amazon AWS Certified Cloud Practitioner

cloud infrastructure where and when you need it.

Which of the following are AWS best practice recommendations for the use of AWS Identity and
Access Management (IAM)? (Select TWO.)

Question 5
Which of the following are AWS best practice recommendations for the use of AWS Identity and
Access Management (IAM)? (Select TWO.)

Options:

A. Use the AWS account root user for daily access.

B. Use access keys and secret access keys on Amazon EC2.

C. Rotate credentials on a regular basis.

D. Create a shared set of access keys for system administrators.

E. Configure multi-factor authentication (MFA).

Answer: C, E

Explanation:
e an access key for your AWS account root user, delete it. If you must keep it, rotate
(change) the access key regularly. To delete or rotate your root user access keys, go to the My
Security Credentials page in the AWS Management Console and sign in with your account's email
address and password. You can manage your access keys in the Access keys section. For more
information about rotating access keys, see Rotating access keys.
Explanation:

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.
Which costs will the company eliminate with this migration? (Select TWO.)

Question 6
A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.
Which costs will the company eliminate with this migration? (Select TWO.)

Options:

A. Cost of data center operations

B. Cost of application licensing

C. Cost of marketing campaigns

D. Cost of physical server hardware

https://www.certification-questions.com
Amazon AWS Certified Cloud Practitioner

E. Cost of network management

Answer: A, D

A company needs steady and predictable performance from its Amazon EC2 instances at the lowest
possible cost. The company also needs the ability to scale resources to ensure that it has the right
resources available at the right time.
Which AWS service or resource will meet these requirements?

Question 7
A company needs steady and predictable performance from its Amazon EC2 instances at the lowest
possible cost. The company also needs the ability to scale resources to ensure that it has the right
resources available at the right time.
Which AWS service or resource will meet these requirements?

Options:

A. Amazon CloudWatch

B. Application Load Balancer

C. AWS Batch

D. Amazon EC2 Auto Scaling

Answer: D

Explanation:
ing monitors your applications and automatically adjusts capacity to maintain steady,
predictable performance at the lowest possible cost.
Explanation:

A company plans to launch an application that will run in multiple locations within the United States.
The company needs to identify the two AWS Regions where the application can operate at the lowest
price. Which AWS service or feature should the company use to determine the Regions that offer the
lowest price?

Question 8
A company plans to launch an application that will run in multiple locations within the United States.
The company needs to identify the two AWS Regions where the application can operate at the lowest
price. Which AWS service or feature should the company use to determine the Regions that offer the
lowest price?

Options:

A. Cost Explorer

B. AWS Budgets

https://www.certification-questions.com
Amazon AWS Certified Cloud Practitioner

C. AWS Trusted Advisor

D. AWS Pricing Calculator

Answer: C

Explanation:
mazon.com/premiumsupport/technology/trusted-advisor/
Explanation:

A company needs to use machine learning and pattern matching to identify and protect sensitive
data that the company stores in the AWS Cloud.
Which AWS service will meet these requirements?

Question 9
A company needs to use machine learning and pattern matching to identify and protect sensitive
data that the company stores in the AWS Cloud.
Which AWS service will meet these requirements?

Options:

A. Amazon Inspector

B. Amazon Macie

C. Amazon GuardDuty

D. AWS Audit Manager

Answer: B

Explanation:
is a fully managed data security and data privacy service that uses machine learning
and pattern matching to discover and protect your sensitive data in AWS.
Explanation:

A company wants to expand from one AWS Region into a second AWS Region. What does the
company need to do to expand into the second Region?

Question 10
A company wants to expand from one AWS Region into a second AWS Region. What does the
company need to do to expand into the second Region?

Options:

A. Contact an AWS account manager to sign a new contract.

B. Move an Availability Zone to the second Region.

https://www.certification-questions.com
Amazon AWS Certified Cloud Practitioner

C. Begin to deploy resources in the second Region.

D. Download the AWS Management Console for the second Region.

Answer: C

Would you like to see more? Don't miss our AWS

https://www.certification-questions.com