Valid AWS-Certified-Cloud-Practitioner Exam Q&A PDF AWS-Certified-Cloud-Practitioner Dump is Ready (Updated 366 Questions)
Exam Questions and Answers for AWS-Certified-Cloud-Practitioner Study Guide
Conclusion
You can become an AWS Certified Cloud Practitioner in no time. Just get to know the details for CLF-C01 test, launch your prep process with reliable dumps and study guides available on Amazon and schedule your test! Good luck!
NEW QUESTION # 113
A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with distributed denial of service (DDoS) attacks.
Which AWS service will meet these requirements?
- A. AWS Shield Standard
- B. AWS WAF
- C. AWS Shield Advanced
- D. Amazon Macie
Answer: C
Explanation:
https://aws.amazon.com/shield/faqs/
NEW QUESTION # 114
Which AWS services provide a user with connectivity between the AWS Cloud and on-premises resources?
(Choose two.)
- A. AWS Direct Connect
- B. AWS Managed Services
- C. Amazon Cognito
- D. AWS VPN
- E. Amazon Connect
Answer: A,D
Explanation:
Explanation/Reference:
https://aws.amazon.com/directconnect/
https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-client-vpn-to-securely-access- aws-and-on-premises-resources/
NEW QUESTION # 115
A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack.
Who should the user contact FIRST about this situation?
- A. AWS Abuse team
- B. AWS Premium Support
- C. AWS Technical Account Manager
- D. AWS Solutions Architect
Answer: A
Explanation:
Explanation/Reference: https://aws.amazon.com/premiumsupport/knowledge-center/report-aws-abuse/
NEW QUESTION # 116
Which solution provides the FASTEST application response times to frequently accessed data to users in multiple AWS Regions?
- A. A virtual private gateway over AWS Direct Connect
- B. AWS CloudFormation in multiple regions
- C. Amazon CloudFront to edge locations
- D. AWS CloudTrail across multiple Availability Zones
Answer: C
Explanation:
Explanation
You can deliver content and decrease end-user latency of your web application using Amazon CloudFront.
CloudFront speeds up content delivery by leveraging its global network of data centers, known as edge locations, to reduce delivery time by caching your content close to your end users. CloudFront fetches your content from an origin, such as an Amazon S3 bucket, an Amazon EC2 instance, an Amazon Elastic Load Balancing load balancer or your own web server, when it's not already in an edge location. CloudFront can be used to deliver your entire website or application, including dynamic, static, streaming, and interactive content.
NEW QUESTION # 117
A company with a Developer-level AWS Support planprovisioned an Amazon RDS database and cannot to it.
Who should the developer contact for this level of support?
- A. AWS Technical Account Manager
- B. AWS Support using a support case
- C. AWS consulting partners
- D. AWS Professional Services
Answer: B
NEW QUESTION # 118
Given the source code for an AWS Lambda function in the local file store, py containing a handler function called get_store and the following AWS CloudFormation template:
What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudforroation deploy?
- A. Use aws serveriess create-package to embed the source file directly into the existing CloudFormation template
- B. Use aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting zip archive
- C. Use aws cloudformacion package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template
- D. Use aws cloudformacion compile to base64 encode and embed the source file into a modified CloudFormation template.
Answer: C
NEW QUESTION # 119
A company is considering migrating its applications to AWS. The company wants to compare the cost of running the workload on-premises to running the equivalent workload on the AWS platform.
Which tool can be used to perform this comparison?
- A. AWS Billing and Cost Management console
- B. AWS Total Cost of Ownership (TCO) Calculator
- C. Cost Explorer
- D. AWS Simple Monthly Calculator
Answer: B
Explanation:
Explanation
TCO calculator compare the cost of running your applications in an on-premises or colocation environment to AWS.
Reference: https://awstcocalculator.com
NEW QUESTION # 120
A company wants to ensure that AWS Management Console users are meeting password complexity requirements.
How can the company configure password complexity?
- A. Using an AWS IAM account password policy
- B. Using an AWS Organizations service control policy (SCP)
- C. Using an AWS Security Hub managed insight
- D. Using an AWS IAM user policy
Answer: B
NEW QUESTION # 121
Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?
- A. Cloud
- B. Platform as a service
- C. On-premises
- D. Hybrid
Answer: A
Explanation:
The cloud allows you to trade capital expenses (such as data centers and physical servers) for variable expenses, and only pay for IT as you consume it. Plus, the variable expenses are much lower than what you would pay to do it yourself because of the economies of scale.
Reference:
https://aws.amazon.com/what-is-cloud-computing/
NEW QUESTION # 122
An online retail company has seasonal sales spikes several times a year, primarily around holidays Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season.
Which advantages of moving to the AWS Cloud would MOST benefit the company? (Select TWO )
- A. AWS shared responsibility model
- B. Elasticity
- C. Pay-as-you-go pricing
- D. AWS service quotas
- E. Global footprint
Answer: B,C
NEW QUESTION # 123
Which of the following is a correct relationship between regions, Availability Zones, and edge locations?
- A. Edge locations contain regions.
- B. Availability Zones contain edge locations.
- C. Data centers contain regions.
- D. Regions contain Availability Zones.
Answer: D
NEW QUESTION # 124
Which of the following is the responsibility of AWS?
- A. Physically destroying storage media at end of life
- B. Configuring security settings on Amazon EC2 instances
- C. Patching guest operating systems
- D. Setting up AWS Identity and Access Management (IAM) users and groups
Answer: A
Explanation:
Media storage devices used to store customer data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored customer data is not removed from AWS control until it has been securely decommissioned.
NEW QUESTION # 125
A company has a globally distributed user base. The company needs its application to be highly available and have low latency for end users.
Which AWS architectural approach will most effectively support these requirements?
- A. Multi-Region, active-password architecture
- B. Sign-Region, Single-AZ architecture
- C. Multi-Region, active-active architecture
- D. Single-Region, Multi-AZ architecture
Answer: C
NEW QUESTION # 126
Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.)
- A. AWS Price List API
- B. AWS Cost and Usage report
- C. AWS Simple Monthly Calculator
- D. AWS product pages
- E. Billing alerts and Amazon CloudWatch alarms
Answer: B,E
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ monitor_estimated_charges_with_cloudwatch.html
NEW QUESTION # 127
Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?
- A. Decoupled architecture
- B. Elasticity
- C. Resilience
- D. High availability
Answer: B
Explanation:
Explanation/Reference: https://wa.aws.amazon.com/wat.concept.elasticity.en.html
NEW QUESTION # 128
Which aspect of AWS infrastructure enables global deployment of compute and storage?
- A. Resource groups
- B. Availability Zones
- C. Regions
- D. Tags
Answer: B
Explanation:
Explanation/Reference: https://cloudacademy.com/blog/aws-global-infrastructure/
NEW QUESTION # 129
What does AWS Shield Standard provide?
- A. DDoS protection
- B. Identity and Access Management (IAM) permissions and access to resources
- C. WAF rules
- D. Data encryption
Answer: A
Explanation:
AWS Shield Standard provides protection for all AWS customers from common, most frequently occurring network and transport layer DDoS attacks that target your web site or application at no additional charge.
NEW QUESTION # 130
A company wants to track AWS resource configuration changes for compliance reasons.
Which AWS feature can be used to meet this requirement?
- A. AWS Organizations service control policies (SCPs)
- B. VPC Flow Logs
- C. AWS Cost and Usage Report
- D. AWS Config rules
Answer: D
Explanation:
Explanation/Reference: https://aws.amazon.com/config/
NEW QUESTION # 131
A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future.
Which of the following is a characteristic of the AWS Cloud that would meet this specific need?
- A. Reliability
- B. Performance
- C. Agility
- D. Elasticity
Answer: A
Explanation:
Agile is a time boxed, iterative approach to software delivery that builds software incrementally from the start of the project, instead of trying to deliver it all at once near the end.
NEW QUESTION # 132
Which AWS services can be used as infrastructure automation tools? (Select TWO.)
- A. Amazon QuickSight
- B. AWS OpsWorks
- C. AWS CloudFormation
- D. Amazon CloudFront
- E. AWS Batch
Answer: B,C
NEW QUESTION # 133
Which AWS IAM feature allows developers to access AWS services through the AWS CLI?
- A. SSH keys
- B. Access keys
- C. API keys
- D. User names/Passwords
Answer: B
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html Access keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK)
NEW QUESTION # 134
Which of the following allows users to provision a dedicated network connection from their internal network to AWS?
- A. AWS Direct Connect
- B. AWS CloudHSM
- C. AWS VPN
- D. Amazon Connect
Answer: A
Explanation:
AWS Direct Connect lets you establish a dedicated network connection between your network and one of the AWS Direct Connect locations. Using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces. This allows you to use the same connection to access public resources such as objects stored in Amazon S3 using public IP address space, and private resources such as Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC) using private IP space, while maintaining network separation between the public and private environments. Virtual interfaces can be reconfigured at any time to meet your changing needs.
NEW QUESTION # 135
A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data.
Which of the following services will help fulfill this requirement?
- A. AWS Direct Connect
- B. Amazon Route 53 global DNS
- C. Amazon CloudFront
- D. Amazon Simple Storage Service (Amazon S3) transfer acceleration
Answer: C
Explanation:
Use AWS Local Zones to deploy workloads closer to your end-users for low-latency requirements. AWS Local Zones have their own connection to the internet and support AWS Direct Connect, so resources created in the Local Zone can serve local end-users with very low-latency communications.nation Reference: https://aws.amazon.com/about-aws/global-infrastructure/localzones/faqs/
NEW QUESTION # 136
A company needs to log information that shows all the AWS resources that the company has launched and terminated. Which AWS service can the company use to meet this requirement?
- A. AWS CloudTrail
- B. AWS Config
- C. AWS Trusted Advisor
- D. Amazon CloudWatch
Answer: B
NEW QUESTION # 137
......
The AWS Certified Cloud Practitioner certification is valid for three years, after which candidates must recertify to maintain their certification status. Amazon AWS Certified Cloud Practitioner certification demonstrates that the candidate has a fundamental understanding of cloud computing and AWS Cloud services and is prepared to work with AWS Cloud technology. It is a valuable credential for individuals who want to enhance their career prospects in the IT industry.
Certification dumps - Amazon Foundational AWS-Certified-Cloud-Practitioner guides - 100% valid: https://testprep.dumpsvalid.com/AWS-Certified-Cloud-Practitioner-brain-dumps.html