AWS Cloud Practitioner CLF-C02
1. A company plans to use an Amazon Snowball Edge de- C
vice to transfer files to the AWS Cloud. Which activities
related to a Snowball Edge device are available to the
company at no cost?
A. Use of the Snowball Edge appliance for a 10-day
period
B. The transfer of data out of Amazon S3 and to the
Snowball Edge appliance
C. The transfer of data from the Snowball Edge appli-
ance into Amazon S3
D. Daily use of the Snowball Edge appliance after 10
days
2. A company has deployed applications on Amazon EC2 B
instances. The company needs to assess application
vulnerabilities and must identify infrastructure de-
ployments that do not meet best practices. Which AWS
service can the company use to meet these require-
ments?
A. AWS Trusted Advisor
B. Amazon Inspector
C. AWS Config
D. Amazon GuardDuty
3. A company has a centralized group of users with B
large file storage requirements that have exceeded
the space available on premises. The company wants
to extend its file storage capabilities for this group
while retaining the performance benefit of sharing
content locally. What is the MOST operationally effi-
, AWS Cloud Practitioner CLF-C02
1o4
cient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user. Mount
each bucket by using an S3 file system mounting util-
ity.
B. Configure and deploy an AWS Storage Gateway file
gateway. Connect each user's workstation to the file
gateway.
C. Move each user's working environment to Amazon
WorkSpaces. Set up an Amazon WorkDocs account for
each user.
D. Deploy an Amazon EC2 instance and attach an Ama-
zon Elastic Block Store (Amazon EBS) Provisioned IOPS
volume. Share the EBS volume directly with the users.
4. According to security best practices, how should an C
Amazon EC2 instance be given access to an Amazon
S3 bucket?
A. Hard code an IAM user's secret key and access key
directly in the application, and upload the file.
B. Store the IAM user's secret key and access key in
a text file on the EC2 instance, read the keys, then
upload the file.
C. Have the EC2 instance assume a role to obtain the
privileges to upload the file.
D. Modify the S3 bucket policy so that any service can
upload to it at any time.
5. Which option is a customer responsibility when using C
Amazon DynamoDB under the AWS Shared Responsi-
bility Model?
, AWS Cloud Practitioner CLF-C02
1o4
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
6. Which option is a perspective that includes founda- C
tional capabilities of the AWS Cloud Adoption Frame-
work (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
7. A company is running and managing its own Docker C
environment on Amazon EC2 instances. The compa-
ny wants an alternative to help manage cluster size,
scheduling, and environment maintenance. Which
AWS service meets these requirements?
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
8. A company wants to run a NoSQL database on Ama- C
zon EC2 instances. Which task is the responsibility of
AWS in this scenario?
A. Update the guest operating system of the EC2 in-
stances.
B. Maintain high availability at the database layer.
C. Patch the physical infrastructure that hosts the EC2
, AWS Cloud Practitioner CLF-C02
1o4
instances.
D. Configure the security group firewall.
9. Which AWS services or tools can identify rightsiz- AE
ing opportunities for Amazon EC2 instances? (Choose
two.)
A. AWS Cost Explorer
B. AWS Billing Conductor
C. Amazon CodeGuru
D. Amazon SageMaker
E. AWS Compute Optimizer
10. Which of the following are benefits of using AWS Trust- C D
ed Advisor? (Choose two.)
A. Providing high-performance container orchestra-
tion
B. Creating and rotating encryption keys
C. Detecting underutilized resources to save costs
D. Improving security by proactively monitoring the
AWS environment
E. Implementing enforced tagging across AWS re-
sources
11. Which of the following is an advantage that users A
experience when they move on-premises workloads
to the AWS Cloud?
A. Elimination of expenses for running and maintain-
ing data centers
B. Price discounts that are identical to discounts from
hardware providers
1. A company plans to use an Amazon Snowball Edge de- C
vice to transfer files to the AWS Cloud. Which activities
related to a Snowball Edge device are available to the
company at no cost?
A. Use of the Snowball Edge appliance for a 10-day
period
B. The transfer of data out of Amazon S3 and to the
Snowball Edge appliance
C. The transfer of data from the Snowball Edge appli-
ance into Amazon S3
D. Daily use of the Snowball Edge appliance after 10
days
2. A company has deployed applications on Amazon EC2 B
instances. The company needs to assess application
vulnerabilities and must identify infrastructure de-
ployments that do not meet best practices. Which AWS
service can the company use to meet these require-
ments?
A. AWS Trusted Advisor
B. Amazon Inspector
C. AWS Config
D. Amazon GuardDuty
3. A company has a centralized group of users with B
large file storage requirements that have exceeded
the space available on premises. The company wants
to extend its file storage capabilities for this group
while retaining the performance benefit of sharing
content locally. What is the MOST operationally effi-
, AWS Cloud Practitioner CLF-C02
1o4
cient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user. Mount
each bucket by using an S3 file system mounting util-
ity.
B. Configure and deploy an AWS Storage Gateway file
gateway. Connect each user's workstation to the file
gateway.
C. Move each user's working environment to Amazon
WorkSpaces. Set up an Amazon WorkDocs account for
each user.
D. Deploy an Amazon EC2 instance and attach an Ama-
zon Elastic Block Store (Amazon EBS) Provisioned IOPS
volume. Share the EBS volume directly with the users.
4. According to security best practices, how should an C
Amazon EC2 instance be given access to an Amazon
S3 bucket?
A. Hard code an IAM user's secret key and access key
directly in the application, and upload the file.
B. Store the IAM user's secret key and access key in
a text file on the EC2 instance, read the keys, then
upload the file.
C. Have the EC2 instance assume a role to obtain the
privileges to upload the file.
D. Modify the S3 bucket policy so that any service can
upload to it at any time.
5. Which option is a customer responsibility when using C
Amazon DynamoDB under the AWS Shared Responsi-
bility Model?
, AWS Cloud Practitioner CLF-C02
1o4
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
6. Which option is a perspective that includes founda- C
tional capabilities of the AWS Cloud Adoption Frame-
work (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
7. A company is running and managing its own Docker C
environment on Amazon EC2 instances. The compa-
ny wants an alternative to help manage cluster size,
scheduling, and environment maintenance. Which
AWS service meets these requirements?
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
8. A company wants to run a NoSQL database on Ama- C
zon EC2 instances. Which task is the responsibility of
AWS in this scenario?
A. Update the guest operating system of the EC2 in-
stances.
B. Maintain high availability at the database layer.
C. Patch the physical infrastructure that hosts the EC2
, AWS Cloud Practitioner CLF-C02
1o4
instances.
D. Configure the security group firewall.
9. Which AWS services or tools can identify rightsiz- AE
ing opportunities for Amazon EC2 instances? (Choose
two.)
A. AWS Cost Explorer
B. AWS Billing Conductor
C. Amazon CodeGuru
D. Amazon SageMaker
E. AWS Compute Optimizer
10. Which of the following are benefits of using AWS Trust- C D
ed Advisor? (Choose two.)
A. Providing high-performance container orchestra-
tion
B. Creating and rotating encryption keys
C. Detecting underutilized resources to save costs
D. Improving security by proactively monitoring the
AWS environment
E. Implementing enforced tagging across AWS re-
sources
11. Which of the following is an advantage that users A
experience when they move on-premises workloads
to the AWS Cloud?
A. Elimination of expenses for running and maintain-
ing data centers
B. Price discounts that are identical to discounts from
hardware providers
