AWS Cloud Practitioner 65 Practice Exam 1 Full Certification Test (CLF-C02) With Well Elaborated Exam
Questions and Answers
Question 1
An organization maintains separate Amazon Virtual Private Clouds (Amazon VPC) for each of its
departments. With expanding business, the organization now wants to connect all Amazon Virtual Private
Clouds (Amazon VPC) for better departmental collaboration. Which AWS service will help the organization
tackle the issue effectively?
AWS Transit Gateway
AWS Direct Connect
VPC peering connection
AWS Site-to-Site VPN Correct
option:
AWS Transit Gateway
AWS Transit Gateway connects Amazon Virtual Private Clouds (Amazon VPC) and onpremises networks
through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts
as a cloud router – each new connection is only made once. As you expand globally, inter-Region peering
connects AWS Transit Gateways using the AWS global network. Your data is automatically encrypted and
never travels over the public internet.
Incorrect options:
VPC peering connection - A VPC peering connection is a networking connection between two Amazon
Virtual Private Clouds (Amazon VPC) that enables you to route traffic between them privately. VPC peering
connection is not transitive, a separate VPC peering connection has to be made between two VPCs that
need to talk to each other. With growing VPCs, this gets difficult to manage.
AWS Direct Connect - AWS Direct Connect creates a dedicated private connection from a remote network to
your VPC. This is a private connection and does not use the public internet. Takes at least a month to
establish this connection. AWS Direct Connect cannot be used to interconnect VPCs.
AWS Site-to-Site VPN - AWS Site-to-Site VPN creates a secure connection between your data center or
branch office and your AWS cloud resources. This connection goes over the public internet. AWS Site-to-Site
VPN cannot be used to interconnect VPCs.
Reference:
https://aws.amazon.com/transit-gateway/
,Question 2
Which of the following Cloud Computing models does the 'gmail' service represent?
Infrastructure as a service (IaaS)
Software as a service (SaaS)
Platform as a service (PaaS)
Function as a service (Faas) Correct
option:
Software as a service (SaaS)
Software as a Service (SaaS) provides you with a complete product that is run and managed by the service
provider. With a Software as a Service (SaaS) offering, you don’t have to think about how the service is
maintained or how the underlying infrastructure is managed. You only need to think about how you will use
that particular software. Gmail is an example of Software as a Service (SaaS).
Incorrect options:
Infrastructure as a service (IaaS) - Infrastructure as a Service (IaaS) contains the basic building blocks for
cloud IT. It typically provides access to networking features, computers (virtual or on dedicated hardware),
and data storage space. IaaS gives the highest level of flexibility and management control over IT resources.
Amazon EC2 is an example of Infrastructure as a Service (IaaS).
Platform as a service (PaaS) - Platform as a Service (PaaS) removes the need to manage underlying
infrastructure (usually hardware and operating systems), and allows you to focus on the deployment and
management of your applications. You don’t need to worry about resource procurement, capacity planning,
software maintenance, patching, or any of the other undifferentiated heavy lifting involved in running your
application. AWS Elastic Beanstalk is an example of Platform as a Service (PaaS).
Function as a service (FaaS) - Function as a service (FaaS) is a category of cloud computing services that
provides a platform allowing customers to develop, run, and manage application functionalities without the
complexity of building and maintaining the infrastructure typically associated with developing and launching
an app. AWS Lambda is an example of Function as a service (FaaS).
Reference: https://aws.amazon.com/types-of-cloud-computing/
Question 3
Compared to the on-demand instance prices, what is the highest possible discount offered for reserved
instances (RI)?
,72
40
90
50
Correct option:
72
Reserved instances (RI) provide you with significant savings (up to 72%) on your Amazon Elastic Compute
Cloud (Amazon EC2) costs compared to on-demand instance pricing. Reserved Instances (RI) are not physical
instances, but rather a billing discount applied to the use of on-demand instances in your account. You can
purchase a reserved instance (RI) for a one-year or three-year commitment, with the three-year
commitment offering a bigger discount.
Incorrect options:
90
50
40
These three options contradict the explanation provided above, so these options are incorrect.
Reference: https://aws.amazon.com/ec2/pricing/
Question 4
Which budget types can be created under AWS Budgets (Select three)?
Hardware budget
Resource budget
Software budget
Cost budget
Usage budget Reservation
budget
Correct options:
, AWS Budgets enable you to plan your service usage, service costs, and instance reservations. AWS Budgets
information is updated up to three times a day. Updates typically occur between 8 to 12 hours after the
previous update. Budgets track your unblended costs, subscriptions, refunds, and RIs. There are four
different budget types you can create under AWS Budgets - Cost budget, Usage budget, Reservation budget
and Savings Plans budget.
Cost budget - Helps you plan how much you want to spend on a service.
Usage budget - Helps you plan how much you want to use one or more services.
Reservation budget - This helps you track the usage of your Reserved Instances (RI). Two ways of doing it -
Reserved Instance (RI) utilization budgets (This lets you see if your Reserved Instances (RI) are unused or
under-utilized), Reserved Instance (RI) coverage budgets (This lets you see how much of your instance usage
is covered by a reservation).
Incorrect options:
Resource budget - This is a made-up option and has been added as a distractor.
Software budget - This is a made-up option and has been added as a distractor.
Hardware budget - This is a made-up option and has been added as a distractor.
Reference:
This is a made-up option and has been added as a distractor
Question 5
A financial services enterprise plans to enable Multi-Factor Authentication (MFA) for its employees. For ease
of travel, they prefer not to use any physical devices to implement Multi-Factor Authentication (MFA).
Which of the below options is best suited for this use case?
Soft Token Multi-Factor Authentication (MFA) device
Virtual Multi-Factor Authentication (MFA) device
U2F security key
Hardware Multi-Factor Authentication (MFA) device Correct option:
Virtual Multi-Factor Authentication (MFA) device
A software app that runs on a phone or other device and emulates a physical device. The device generates a
six-digit numeric code based upon a time-synchronized one-time password algorithm. The user must type a
valid code from the device on a second webpage during sign-in. Each virtual Multi-Factor Authentication
Questions and Answers
Question 1
An organization maintains separate Amazon Virtual Private Clouds (Amazon VPC) for each of its
departments. With expanding business, the organization now wants to connect all Amazon Virtual Private
Clouds (Amazon VPC) for better departmental collaboration. Which AWS service will help the organization
tackle the issue effectively?
AWS Transit Gateway
AWS Direct Connect
VPC peering connection
AWS Site-to-Site VPN Correct
option:
AWS Transit Gateway
AWS Transit Gateway connects Amazon Virtual Private Clouds (Amazon VPC) and onpremises networks
through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts
as a cloud router – each new connection is only made once. As you expand globally, inter-Region peering
connects AWS Transit Gateways using the AWS global network. Your data is automatically encrypted and
never travels over the public internet.
Incorrect options:
VPC peering connection - A VPC peering connection is a networking connection between two Amazon
Virtual Private Clouds (Amazon VPC) that enables you to route traffic between them privately. VPC peering
connection is not transitive, a separate VPC peering connection has to be made between two VPCs that
need to talk to each other. With growing VPCs, this gets difficult to manage.
AWS Direct Connect - AWS Direct Connect creates a dedicated private connection from a remote network to
your VPC. This is a private connection and does not use the public internet. Takes at least a month to
establish this connection. AWS Direct Connect cannot be used to interconnect VPCs.
AWS Site-to-Site VPN - AWS Site-to-Site VPN creates a secure connection between your data center or
branch office and your AWS cloud resources. This connection goes over the public internet. AWS Site-to-Site
VPN cannot be used to interconnect VPCs.
Reference:
https://aws.amazon.com/transit-gateway/
,Question 2
Which of the following Cloud Computing models does the 'gmail' service represent?
Infrastructure as a service (IaaS)
Software as a service (SaaS)
Platform as a service (PaaS)
Function as a service (Faas) Correct
option:
Software as a service (SaaS)
Software as a Service (SaaS) provides you with a complete product that is run and managed by the service
provider. With a Software as a Service (SaaS) offering, you don’t have to think about how the service is
maintained or how the underlying infrastructure is managed. You only need to think about how you will use
that particular software. Gmail is an example of Software as a Service (SaaS).
Incorrect options:
Infrastructure as a service (IaaS) - Infrastructure as a Service (IaaS) contains the basic building blocks for
cloud IT. It typically provides access to networking features, computers (virtual or on dedicated hardware),
and data storage space. IaaS gives the highest level of flexibility and management control over IT resources.
Amazon EC2 is an example of Infrastructure as a Service (IaaS).
Platform as a service (PaaS) - Platform as a Service (PaaS) removes the need to manage underlying
infrastructure (usually hardware and operating systems), and allows you to focus on the deployment and
management of your applications. You don’t need to worry about resource procurement, capacity planning,
software maintenance, patching, or any of the other undifferentiated heavy lifting involved in running your
application. AWS Elastic Beanstalk is an example of Platform as a Service (PaaS).
Function as a service (FaaS) - Function as a service (FaaS) is a category of cloud computing services that
provides a platform allowing customers to develop, run, and manage application functionalities without the
complexity of building and maintaining the infrastructure typically associated with developing and launching
an app. AWS Lambda is an example of Function as a service (FaaS).
Reference: https://aws.amazon.com/types-of-cloud-computing/
Question 3
Compared to the on-demand instance prices, what is the highest possible discount offered for reserved
instances (RI)?
,72
40
90
50
Correct option:
72
Reserved instances (RI) provide you with significant savings (up to 72%) on your Amazon Elastic Compute
Cloud (Amazon EC2) costs compared to on-demand instance pricing. Reserved Instances (RI) are not physical
instances, but rather a billing discount applied to the use of on-demand instances in your account. You can
purchase a reserved instance (RI) for a one-year or three-year commitment, with the three-year
commitment offering a bigger discount.
Incorrect options:
90
50
40
These three options contradict the explanation provided above, so these options are incorrect.
Reference: https://aws.amazon.com/ec2/pricing/
Question 4
Which budget types can be created under AWS Budgets (Select three)?
Hardware budget
Resource budget
Software budget
Cost budget
Usage budget Reservation
budget
Correct options:
, AWS Budgets enable you to plan your service usage, service costs, and instance reservations. AWS Budgets
information is updated up to three times a day. Updates typically occur between 8 to 12 hours after the
previous update. Budgets track your unblended costs, subscriptions, refunds, and RIs. There are four
different budget types you can create under AWS Budgets - Cost budget, Usage budget, Reservation budget
and Savings Plans budget.
Cost budget - Helps you plan how much you want to spend on a service.
Usage budget - Helps you plan how much you want to use one or more services.
Reservation budget - This helps you track the usage of your Reserved Instances (RI). Two ways of doing it -
Reserved Instance (RI) utilization budgets (This lets you see if your Reserved Instances (RI) are unused or
under-utilized), Reserved Instance (RI) coverage budgets (This lets you see how much of your instance usage
is covered by a reservation).
Incorrect options:
Resource budget - This is a made-up option and has been added as a distractor.
Software budget - This is a made-up option and has been added as a distractor.
Hardware budget - This is a made-up option and has been added as a distractor.
Reference:
This is a made-up option and has been added as a distractor
Question 5
A financial services enterprise plans to enable Multi-Factor Authentication (MFA) for its employees. For ease
of travel, they prefer not to use any physical devices to implement Multi-Factor Authentication (MFA).
Which of the below options is best suited for this use case?
Soft Token Multi-Factor Authentication (MFA) device
Virtual Multi-Factor Authentication (MFA) device
U2F security key
Hardware Multi-Factor Authentication (MFA) device Correct option:
Virtual Multi-Factor Authentication (MFA) device
A software app that runs on a phone or other device and emulates a physical device. The device generates a
six-digit numeric code based upon a time-synchronized one-time password algorithm. The user must type a
valid code from the device on a second webpage during sign-in. Each virtual Multi-Factor Authentication
