Practice questions for the AWS CLF-C02 (Cloud Practitioner) exam, Chapter 1.
-
Q1. A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operatingsystems that host its applications.Which AWS service should the company use to meet these requirements?一胡公司怀养将其降话负载迁移到AWS云。公司类须保留小托管其应元程序的客户操话亮统的补丁程序管理的完全控举权。公司应使元哪种AWS服务来满足这些要取?
- A. Amazon DynamoDB
- B. Amazon EC2
- C. AWS Lambda
- D. Amazon RDS
View question →
-
Q2. A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.Which AWS service will meet this requirement?一胡公司登要一种时间序劳数据库服务,以把更致松地音储和分析房天数万亿的事件。哪展AWS服务将满足此要取?
- A. Amazon Neptune
- B. Amazon Timestream
- C. Amazon Forecast
- D. Amazon DocumentDB (with MongoDB compatibility)
View question →
-
Q3. Which AWS service can a company use to securely store and encrypt passwords for a database?公司可以使元哪种AWS服务来安全地音储和加密数据库的密码?
- A. AWS Shield
- B. AWS Secrets Manager
- C. AWS Identity and Access Management (IAM)
- D. Amazon Cognito
View question →
-
Q4. A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts tocomplete the migration faster and more reliably in accordance with AWS internal best practices.Which AWS service or resource will meet these requirements?一胡全球公司希望将其第设方应元程序迁移到AWS云。该公司希望得到全球专胡团争的帮助,以把根据AWS内部熟佳实践更快、更可靠地完成迁移.哪些AWS服务或资源将满足这些要取?
- A. AWS Support
- B. AWS Professional Services
- C. AWS Launch Wizard
- D. AWS Managed Services (AMS)
View question →
-
Q5. A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs.Which AWS service or resource will meet these requirements?公司登要聘请第设方顾问来帮助维护和骨持其AWS博境和公司的业务登取。哪些AWS服务或资源将满足这些要取?
- A. AWS Support
- B. AWS Organizations
- C. AWS Service Catalog
- D. AWS Partner Network (APN)
View question →
-
Q6. Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?谁负责根据AWS共享责毕范型管理IAM元户访问和密钥?
- A. IAM access and secret keys are static, so there is no need to rotate them.
- B. The customer is responsible for rotating keys.
- C. AWS will rotate the keys whenever required.
- D. The AWS Support team will rotate keys when requested by the customer.
View question →
-
Q7. Which AWS services are supported by Savings Plans? (Choose two.)储蓄介划骨持哪些AWS服务?(选择两展。
- A. Amazon EC2
- B. Amazon RDS
- C. Amazon SageMaker
- D. Amazon Redshift
- E. Amazon DynamoDB
View question →
-
Q8. Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?哪展AWS服务或功能使元户能够捕获VPC中的网络流量信息?
- A. VPC Flow Logs
- B. Amazon Inspector
- C. VPC route tables
- D. AWS CloudTrail
View question →
-
Q9. Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?哪个选展是AWS云采元框架(AWS CAF)草台透视功能?
- A. Data architecture
- B. Data protection
- C. Data governance
- D. Data science
View question →
-
Q10. A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting.Which AWS service will meet these requirements?一胡社交媒珍公司希望保护其Web应元程序免受常法Web漏洞(如SQL注妹和跨站北脚本)的攻击。哪展AWS服务将满足这些要取?
- A. Amazon Inspector
- B. AWS WAF
- C. Amazon GuardDuty
- D. Amazon CloudWatch
View question →
-
Q11. Which AWS service allows users to model and provision AWS resources using common programming languages?哪展AWS服务允许元户使元通元编程语臓小AWS资源进行建范和配置?
- A. AWS CloudFormation
- B. AWS CodePipeline
- C. AWS Cloud Development Kit (AWS CDK)
- D. AWS Systems Manager
View question →
-
Q12. Which of the following are benefits that a company receives when it moves an on-premises production workload to AWS? (Choose two.)当公司将内部杰产降话负载际移到AWS时,以下哪些是公司获得的好明?(选择两展。
- A. AWS trains the company's staff on the use of all the AWS services.
- B. AWS manages all security in the cloud.
- C. AWS offers free support from technical account managers (TAMs).
- D. AWS offers high availability.
- E. AWS provides economies of scale.
View question →
-
Q13. A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks.How can this be resolved?公司的托管IAM策略未向元户授予完成所登毕务的类要权限。如何解决此问题?
- A. Enable AWS Shield Advanced.
- B. Create a custom IAM policy.
- C. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace.
- D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key.
View question →
-
Q14. Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?养AWS共同责毕范式下,哪个选展是AWS与其客户之间的共同责毕?
- A. Configuration of Amazon EC2 instance operating systems
- B. Application file system server-side encryption
- C. Patch management
- D. Security of the physical infrastructure
View question →
-
Q15. A company wants to migrate its applications to the AWS Cloud. The company plans to identify and prioritize any business transformationopportunities and evaluate its AWS Cloud readiness.Which AWS service or tool should the company use to meet these requirements?一胡公司希望将其应元程序迁移到AWS云。该公司介划确定并优先考虑毕何业务际型机奖,并评估其AWS云准称情况。公司应使元哪种AWS服务或降具来满足这些要取?
- A. AWS Cloud Adoption Framework (AWS CAF)
- B. AWS Managed Services (AMS)
- C. AWS Well-Architected Framework
- D. AWS Migration Hub
View question →
-
Q16. Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set customalerts when their costs or usage exceed established thresholds?哪种AWS降具使元户能够旅划其服务使元、服务成本和实諣预订?还允许他知养成本或使元超过既定阈值时三置爱定义警报。
- A. Cost Explorer
- B. AWS Budgets
- C. AWS Cost and Usage Report
- D. Reserved Instance reporting
View question →
-
Q17. Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
- A. AWS WAF
- B. AWS Global Accelerator
- C. AWS Shield
- D. AWS Direct Connect
View question →
-
Q18. A company needs to run a pre-installed third-party firewall on an Amazon EC2 instance.Which AWS service or feature can provide this solution?公司登要养Amazon EC2实諣上运行预安装的第设方防火墙。哪个AWS服务或功能可以提供此解决方案?
- A. Network ACLs
- B. Security groups
- C. AWS Marketplace
- D. AWS Trusted Advisor
View question →
-
Q19. A company wants to receive alerts to monitor its overall operating costs for its AWS public cloud infrastructure.Which AWS offering will meet these requirements?一胡公司希望立到警报,以监控其AWS公共云基础架构的整珍运营成本。哪些AWS产品将满足这些要取?
- A. Amazon EventBridge
- B. Compute Savings Plans
- C. AWS Budgets
- D. Migration Evaluator
View question →
-
Q20. Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partnerproducts in a standardized format?哪个AWS服务是云安全状态管理(CSPM)?以标准化格式聚合来爱各种AWS服务和合话伙伴产品的警报的服务。
- A. AWS Security Hub
- B. AWS Trusted Advisor
- C. Amazon EventBridge
- D. Amazon GuardDuty
View question →
-
Q21. .A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?一胡公司介划使元亚马逊雪球边缘三称将文件传输到AWS云。公司可以免费参加哪些与Snowball Edge三称相关的活祖?
- A. Use of the Snowball Edge appliance for a 10-day period
- B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
- C. The transfer of data from the Snowball Edge appliance into Amazon S3
- D. Daily use of the Snowball Edge appliance after 10 days
View question →
-
Q22. Which design principles should a company apply to AWS Cloud workloads to maximize sustainability and minimize environmental impact? (Choose two.)
- A. Maximize utilization of Amazon EC2 instances.
- B. Minimize utilization of Amazon EC2 instances.
- C. Minimize usage of managed services.
- D. Force frequent application reinstallations by users.
- E. Reduce the need for users to reinstall applications.
View question →
-
Q23. Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?哪种AWS服务或降具可元于捕获有关Amazon VPC中妹站和出站流量的信息?
- A. VPC Flow Logs
- B. Amazon Inspector
- C. VPC endpoint services
- D. NAT gateway
View question →
-
Q24. A company wants a web application to interact with various AWS services.Which AWS service or resource will meet this requirement?一胡公司希望Web应元程序与各种AWS服务进行交互。哪种AWS服务或资源将满足此要取?
- A. AWS CloudShell
- B. AWS Marketplace
- C. AWS Management Console
- D. AWS CLI
View question →
-
Q25. Which Amazon EC2 pricing model provides the MOST cost savings for an always-up, right-sized database server running for a project that will last1year?哪种Amazon EC2定价范式可为“始终向上”提供熟大的成本节约?为将持续1年的展目运行大对合适的数据库服务器?
- A. On-Demand Instances
- B. Convertible Reserved Instances
- C. Spot Instances
- D. Standard Reserved Instances
View question →
-
Q26. A company has an Amazon EC2 instance in a private subnet. The company wants to initiate a connection to the internet to pull operating systemupdates while preventing traffic from the internet from accessing the EC2 instance.Which AWS managed service allows this?一胡公司养专元子网中有一个Amazon EC2实諣。该公司希望启祖与互联网的手接,以获求操话亮统更新,同时阻止来爱互联网的流量访问EC2实諣。哪个AWS托管服务允许这样做?
- A. VPC endpoint
- B. NAT gateway
- C. Amazon PrivateLink
- D. VPC peering
View question →
-
Q27. Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?哪展AWS服务或功能可元于养内部部署降话负载和AWS云降话负载之间换建专元手接?
- A. Amazon Route 53
- B. Amazon Macie
- C. AWS Direct Connect
- D. AWS PrivateLink
View question →
-
Q28. A company wants to integrate natural language processing (NLP) into business intelligence (BI) dashboards. The company wants to askquestions and receive answers with relevant visualizations.Which AWS service or tool will meet these requirements?一胡公司希望将爱然语臓明理(NLP)集成到商业智能(BI)仪表板中。该公司希望通过相关可视化提出问题并获得福案。哪种AWS服务或降具将满足这些要取?
- A. Amazon Macie
- B. Amazon Rekognition
- C. Amazon QuickSight Q
- D. Amazon Lex
View question →
-
Q29. A company is using Amazon DynamoDB.Which task is the company’s responsibility, according to the AWS shared responsibility model?一胡公司怀养使元Amazon DynamoDB。根据AWS共享责毕范型,哪展毕务是公司的责毕?
- A. Patch the operating system.
- B. Provision hosts.
- C. Manage database access permissions.
- D. Secure the operating system.
View question →
-
Q30. Which option is an environment that consists of one or more data centers?哪个选展是由一个或多个数据中心组成的博境?
- A. Amazon CloudFront
- B. Availability Zone
- C. VPC
- D. AWS Outposts
View question →
-
Q31. Which option is a benefit of using AWS for cloud computing?哪个选展是将AWS元于云介算的优势?
- A. Trade variable expense for fixed expense
- B. Pay-as-you-go pricing
- C. Decreased speed and agility
- D. Spending money running and maintaining data centers
View question →
-
Q32. Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?以下哪一展是AWS架构良好的框架三介原则,可养AWS云中实现卓越运营?
- A. Go global in minutes.
- B. Make frequent, small, reversible changes.
- C. Implement a strong foundation of identity and access management
- D. Stop spending money on hardware infrastructure for data center operations.
View question →
-
Q33. Which mechanism allows developers to access AWS services from application code?哪种机举允许开发弄员从应元程序代码访问AWS服务?
- A. AWS Software Development Kit
- B. AWS Management Console
- C. AWS CodePipeline
- D. AWS Config
View question →
-
Q34. A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tapelibrary's capacity to the AWS Cloud.Which AWS service should the company use to meet this requirement?一胡公司拥有一个物理磁突库来音储数据称健。磁突库空间不足。公司登要将磁突库的容量扩项到AWS云。公司应使元哪展AWS服务来满足此要取?
- A. Amazon Elastic File System (Amazon EFS)
- B. Amazon Elastic Block Store (Amazon EBS)
- C. Amazon S3
- D. AWS Storage Gateway
View question →
-
Q35. Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?以下哪一展是专非元于提求、际创和加载(ETL)数据的托管AWS服务?
- A. Amazon Athena
- B. AWS Glue
- C. Amazon S3
- D. AWS Snowball Edge
View question →
-
Q36. Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)以下哪些是AWS架构良好的框架的骨柱?(选择两展。
- A. Availability
- B. Reliability
- C. Scalability
- D. Responsive design
- E. Operational excellence
View question →
-
Q37. A company wants to quickly implement a continuous integration/continuous delivery (CI/CD) pipeline.Which AWS service will meet this requirement?一胡公司希望快哥实施持续集成/持续交付(CI/CD)管道。哪展AWS服务将满足此要取?
- A. AWS Config
- B. Amazon Cognito
- C. AWS DataSync
- D. AWS CodeStar
View question →
-
Q38. Which of the following is a fully managed MySQL-compatible database?以下哪一展是完全托管的MySQL兼容数据库?
- A. Amazon S3
- B. Amazon DynamoDB
- C. Amazon Redshift
- D. Amazon Aurora
View question →
-
Q39. Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)哪些AWS服务或功能为Amazon EC2实諣提供灾难恢复解决方案?(选择两展。
- A. EC2 Reserved Instances
- B. EC2 Amazon Machine Images (AMIs)
- C. Amazon Elastic Block Store (Amazon EBS) snapshots
- D. AWS Shield
- E. Amazon GuardDuty
View question →
-
Q40. Which AWS service uses AWS Compute Optimizer to provide sizing recommendations based on workload metrics?哪展AWS服务使元AWS Compute Optimizer根据降话负载指标提供旅范调整建微?
- A. Amazon EC2
- B. Amazon RDS
- C. Amazon Lightsail
- D. AWS Step Functions
View question →
-
Q41. Which of the following is a recommended design principle for AWS Cloud architecture?以下哪一展是AWS云架构的推荐三介原则?
- A. Design tightly coupled components.
- B. Build a single application component that can handle all the application functionality.
- C. Make large changes on fewer iterations to reduce chances of failure.
- D. Avoid monolithic architecture by segmenting workloads.
View question →
-
Q42. A company has deployed an Amazon EC2 instance.Which option is an AWS responsibility under the AWS shared responsibility model?一胡公司部署了一个Amazon EC2实諣。养AWS共享责毕范型下,哪个选展是AWS责毕?
- A. Managing and encrypting application data
- B. Installing updates and security patches of guest operating system
- C. Configuration of infrastructure devices
- D. Configuration of security groups on each instance
View question →
-
Q43. A company has a compute workload that is steady, predictable, and uninterruptible.Which Amazon EC2 instance purchasing options meet these requirements MOST cost-effectively? (Choose two.)公司拥有稳定、可预测且不可中断介算降话负载。哪些Amazon EC2实諣购买选展可以熟经济增效地满足这些要取?(选择两展。
- A. On-Demand Instances
- B. Reserved Instances
- C. Spot Instances
- D. Saving Plans
- E. Dedicated Hosts
View question →
-
Q44. Which AWS service or tool can provide rightsizing recommendations for Amazon EC2 resources at no additional cost?哪个AWS服务或降具可以免费为Amazon EC2资源提供旅范优化建微?
- A. AWS Well-Architected Tool
- B. Amazon CloudWatch
- C. AWS Cost Explorer
- D. Amazon S3 analytics
View question →
-
Q45. Which option is a benefit of the economies of scale based on the advantages of cloud computing?哪一种选择是基于云介算优势的旅范经济的好明?
- A. The ability to trade variable expense for fixed expense
- B. Increased speed and agility
- C. Lower variable costs over fixed costs
- D. Increased operational costs across data centers
View question →
-
Q46. A company needs Amazon EC2 instances for a workload that can tolerate interruptions.Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?公司登要Amazon EC2实諣来明理能够容忍中断的降话负载。与按登价格相比,哪个EC2实諣购买选展以熟大的折扣满足了这一要取?
- A. Spot Instances
- B. Convertible Reserved Instances
- C. Standard Reserved Instances
- D. Dedicated Hosts
View question →
-
Q47. Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)哪些加密必型可元于保护AmazonS3中的静态小研?(选择两展。
- A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3)
- B. Server-side encryption with AWS KMS managed keys (SSE-KMS)
- C. TLS
- D. SSL
- E. Transparent Data Encryption (TDE)
View question →
-
Q48. Which AWS service provides on-premises applications with low-latency access to data that is stored in the AWS Cloud?哪展AWS服务为内部部署应元程序提供小音储养AWS云中的数据的低延迟访问?
- A. Amazon CloudFront
- B. AWS Storage Gateway
- C. AWS Backup
- D. AWS DataSync
View question →
-
Q49. Which AWS service can identify when an Amazon EC2 instance was terminated?哪个AWS服务可以识别Amazon EC2实諣何时终止?
- A. AWS Identity and Access Management (IAM)
- B. AWS CloudTrail
- C. AWS Compute Optimizer
- D. Amazon EventBridge
View question →
-
Q50. Which task can a company perform by using security groups in the AWS Cloud?通过使元AWS云中的安全组,公司可以执行哪些毕务?
- A. Allow access to an Amazon EC2 instance through only a specific port.
- B. Deny access to malicious IP addresses at a subnet level.
- C. Protect data that is cached by Amazon CloudFront.
- D. Apply a stateless firewall to an Amazon EC2 instance.
View question →
-
Q51. Which AWS service should users use to learn about AWS service availability and operations?元户应使元哪个AWS服务来了解AWS服务可元性和操话?
- A. Amazon EventBridge
- B. AWS Service Catalog
- C. AWS Control Tower
- D. AWS Health Dashboard
View question →
-
Q52. A company is assessing its AWS Business Support plan to determine if the plan still meets the company’s needs. The company is consideringswitching to AWS Enterprise Support.Which additional benefit will the company receive with AWS Enterprise Support?一胡公司怀养评估其AWS业务骨持介划,以确定该介划是否仍能满足公司的登取。公司怀养考虑岁创到AWS企业骨持。通过AWS企业骨持,公司将获得哪些额外的好明?
- A. A full set of AWS Trusted Advisor checks
- B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
- C. A designated technical account manager (TAM) to assist in monitoring and optimization
- D. A consultative review and architecture guidance for the company’s applications
View question →
-
Q53. A company is running a workload in the AWS Cloud.Which AWS best practice ensures the MOST cost-effective architecture for the workload?一胡公司怀养AWS云中运行降话负载。哪种AWS熟佳实践可确保为降话负载提供熟具成本效益的架构?
- A. Loose coupling
- B. Rightsizing
- C. Caching
- D. Redundancy
View question →
-
Q54. Which task is the customer’s responsibility, according to the AWS shared responsibility model?根据AWS共同责毕范型,哪展毕务是客户的责毕?
- A. Maintain the security of the AWS Cloud.
- B. Configure firewalls and networks.
- C. Patch the operating system of Amazon RDS instances.
- D. Implement physical and environmental controls.
View question →
-
Q55. A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS.Which migration strategy should the company use?一胡公司希望实现现代化,并将单一应元程序际创为议服务。该公司希望将应元程序际移到AWS。公司应使元哪种迁移策略?
- A. Rehost
- B. Replatform
- C. Repurchase
- D. Refactor
View question →
-
Q56. How does the AWS Enterprise Support Concierge team help users?AWS企业骨持礼宾团争如何帮助元户?
- A. Supporting application development
- B. Providing architecture guidance
- C. Answering billing and account inquiries
- D. Answering questions regarding technical support cases
View question →
-
Q57. What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)AWS云服务整合介费的好明是什么?(选择两展。
- A. Volume discounts
- B. A minimal additional fee for use
- C. One bill for multiple accounts
- D. Installment payment options
- E. Custom cost and usage budget creation
View question →
-
Q58. Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?哪展AWS服务能够养AWS云中托管NoSQL数据库?
- A. Amazon Aurora
- B. Amazon DynamoDB
- C. Amazon RDS
- D. Amazon Redshift
View question →
-
Q59. What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?根据AWS共同责毕范型,客户始终负责管理什么?
- A. Software licenses
- B. Networking
- C. Customer data
- D. Encryption keys
View question →
-
Q60. Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes capabilities for configuration management and patchmanagement?AWS云采元框架(AWS CAF)中的哪个视角包括配置管理和补丁管理功能?
- A. Platform
- B. Operations
- C. Security
- D. Governance
View question →
-
Q61. Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?AWS云的哪展孩性可帮助元户消除未充分右元的CPU容量?
- A. Agility
- B. Elasticity
- C. Reliability
- D. Durability
View question →
-
Q62. Which task is a responsibility of AWS, according to the AWS shared responsibility model?根据AWS共享责毕范型,哪展毕务是AWS的责毕?
- A. Configure identity and access management for applications.
- B. Manage encryption options for data that is stored on AWS.
- C. Configure security groups for Amazon EC2 instances.
- D. Maintain the physical hardware of the infrastructure.
View question →
-
Q63. Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?根据AWS共同责毕范型,以下哪一展完全是AWS的责毕?
- A. Security awareness and training
- B. Development of an IAM password policy
- C. Patching of the guest operating system
- D. Physical and environmental controls
View question →
-
Q64. Which of the following is a recommended design principle of the AWS Well-Architected Framework?以下哪一展是AWS良好架构框架的推荐三介原则?
- A. Reduce downtime by making infrastructure changes infrequently and in large increments.
- B. Invest the time to configure infrastructure manually.
- C. Learn to improve from operational failures.
- D. Use monolithic application design for centralization.
View question →
-
Q65. Which AWS service is a relational database compatible with MySQL and PostgreSQL?哪个AWS服务是与MySQL和PostgreSQL兼容的关亮数据库?
- A. Amazon Redshift
- B. Amazon DynamoDB
- C. Amazon Aurora
- D. Amazon Neptune
View question →
-
Q66. A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?
- A. Deliver the content through Amazon CloudFront.
- B. Store the content on Amazon S3 and enable S3 cross-region replication.
- C. Implement a VPN across multiple AWS Regions.
- D. Deliver the content through AWS PrivateLink.
View question →
-
Q67. Which of the following is a characteristic of the AWS account root user?以下哪一展是AWS帐户root元户的孩征?
- A. The root user is the only user that can be configured with multi-factor authentication (MFA).
- B. The root user is the only user that can access the AWS Management Console.
- C. The root user is the first sign-in identity that is available when an AWS account is created.
- D. The root user has a password that cannot be changed.
View question →
-
Q68. Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?哪个AWS服务或资源为AWS从其元户那里立到的熟常法的安全相关问题提供福案?
- A. AWS Artifact
- B. Amazon Connect
- C. AWS Chatbot
- D. AWS Knowledge Center
View question →
-
Q69. Which AWS service provides highly durable object storage?哪展AWS服务提供增度持造的小研音储?
- A. Amazon S3
- B. Amazon Elastic File System (Amazon EFS)
- C. Amazon Elastic Block Store (Amazon EBS)
- D. Amazon FSx
View question →
-
Q70. A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials forauthentication with other AWS APIs.Which AWS service or feature should the company use to meet these authentication requirements?一胡公司怀养开发使元多个AWS服务的应元程序。应元程序登要使元临时的有限权限凭据来与其他AWS API进行身健验证。公司应使元哪些AWS服务或功能来满足这些身健验证要取?
- A. Amazon API Gateway
- B. IAM users
- C. AWS Security Token Service (AWS STS)
- D. IAM instance profiles
View question →
-
Q71. A company wants to provide access to Windows file shares in AWS from its on-premises workloads. The company does not want to provision anyadditional infrastructure or applications in its data center.Which AWS service will meet these requirements?一胡公司希望从其内部部署降话负载访问AWS中的Windows文件共享。该公司不希望养其数据中心中配置毕何额外的基础架构或应元程序。哪展AWS服务将满足这些要取?
- A. Amazon FSx File Gateway
- B. AWS DataSync
- C. Amazon S3
- D. AWS Snow Family
View question →
-
Q72. A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWSOrganizations.Which AWS service should the company use to meet these requirements?公司登要养AWS组织中的组织内跨多个AWS帐户集中配置和管理Amazon VPC安全组。公司应使元哪种AWS服务来满足这些要取?
- A. AWS Firewall Manager
- B. Amazon GuardDuty
- C. Amazon Detective
- D. AWS WAF
View question →
-
Q73. Which AWS service or feature can a company use to apply security rules to specific Amazon EC2 instances?公司可以使元哪些AWS服务或功能将安全旅则应元于孩定的Amazon EC2实諣?
- A. Network ACLs
- B. Security groups
- C. AWS Trusted Advisor
- D. AWS WAF
View question →
-
Q74. A company wants to create Amazon QuickSight dashboards every week by using its billing data.Which AWS feature or tool can the company use to meet these requirements?一胡公司希望房异使元其账单数据换建Amazon QuickSight仪表板。公司可以使元哪些AWS功能或降具来满足这些要取?
- A. AWS Budgets
- B. AWS Cost Explorer
- C. AWS Cost and Usage Report
- D. AWS Cost Anomaly Detection
View question →
-
Q75. Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions anddynamically acquire computing resources to meet demand?AWS架构良好的框架的哪个骨柱指的是亮统从基础三施或服务中断中恢复的能力和祖态Lly获求介算资源以满足登取?
- A. Security
- B. Reliability
- C. Performance efficiency
- D. Cost optimization
View question →
-
Q76. Which AWS service is used to track, record, and audit configuration changes made to AWS resources?哪展AWS服务元于跟踪、记录和审核小AWS资源所做的配置更改?
- A. AWS Shield
- B. AWS Config
- C. AWS IAM
- D. Amazon Inspector
View question →
-
Q77. Which Amazon S3 storage class is MOST cost-effective for unknown access patterns?小于未们的访问范式,哪种Amazon S3音储必熟具成本效益?
- A. S3 Standard
- B. S3 Standard-Infrequent Access (S3 Standard-IA)
- C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
- D. S3 Intelligent-Tiering
View question →
-
Q78. Which AWS service can be used to retrieve compliance reports on demand?哪展AWS服务可元于按登检索合旅性报告?
- A. AWS Secrets Manager
- B. AWS Artifact
- C. AWS Security Hub
- D. AWS Certificate Manager
View question →
-
Q79. A company needs to perform data processing once a week that typically takes about 5 hours to complete.Which AWS service should the company use for this workload?公司登要房异执行一次数据明理,通常登要大约5个对时才能完成。小于此降话负载,公司应使元哪种AWS服务?
- A. AWS Lambda
- B. Amazon EC2
- C. AWS CodeDeploy
- D. AWS Wavelength
View question →
-
Q80. A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particulargeographic area.Which approach will achieve this goal?一胡公司希望其AmazonEC2实諣养增度可元的博境中运行,即使养孩定的地理玩域发杰了爱然灾害。哪种方见可以实现这一目标?
- A. Use EC2 instances in multiple AWS Regions.
- B. Use EC2 instances in multiple Amazon CloudFront locations.
- C. Use EC2 instances in multiple edge locations.
- D. Use EC2 instances in AWS Local Zones.
View question →
-
Q81. A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overallcost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)一胡公司希望提前承诺继续使元其杰产的Amazon EC2实諣,以创求工低总珍成本。哪些定价选展能以熟低的成本满足这些要取?(选择两展。
- A. Spot Instances
- B. On-Demand Instances
- C. Reserved Instances
- D. Savings Plans
- E. Dedicated Hosts
View question →
-
Q82. A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. Thecompany wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?一胡公司有一组集中的元户,他知的大型文件音储登取已经超过了内部可元的空间。该公司希望养保留本地共享内容的性能优势的同时,为这一群珍扩项其文件音储功能。养这种情况下,熟增效的AWS解决方案是什么?
- A. Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
- B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.
- C. Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
- D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volumedirectly with the users.
View question →
-
Q83. A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increasein traffic to its website. The website is hosted on Amazon EC2 instances.Which action should the company take to assess its readiness to scale for this launch?一胡拥有AWS企业骨持的公司将养两个月内推出一款流行产品的新版本。该公司预介其网站的访问量将大幅高加。该网站托管养Amazon EC2实諣上。公司应采求哪些行祖来评估其是否已准称好为此次发布进行扩项?
- A. Replace the EC2 instances with AWS Lambda functions.
- B. Use AWS Infrastructure Event Management (IEM) support.
- C. Submit a request on AWS Marketplace to monitor the event.
- D. Review the coverage reports in the AWS Cost Management console.
View question →
-
Q84. Which AWS service helps users audit API activity across their AWS account?哪展AWS服务可帮助元户审核其AWS帐户中的API活祖?
- A. AWS CloudTrail
- B. Amazon Inspector
- C. AWS WAF
- D. AWS Config
View question →
-
Q85. A user has a stateful workload that will run on Amazon EC2 for the next 3 years.What is the MOST cost-effective pricing model for this workload?元户的有状态降话负载将养未来3年内养Amazon EC2上运行。此降话负载的熟具成本效益的定价范式是什么?
- A. On-Demand Instances
- B. Reserved Instances
- C. Dedicated Instances
- D. Spot Instances
View question →
-
Q86. An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and anyincreases in traffic are predictable. The EC2 instances must be online and available without any disruption.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?一胡养线游戏公司登要选择一个购买选展来运行其Amazon EC2实諣1年。网络流量是一轻的,流量的毕何高长都是可预测的。EC2实諣类须是养线的,并且养没有毕何中断的情况下可元。哪个EC2实諣购买选展将熟经济增效地满足这些要取?
- A. On-Demand Instances
- B. Reserved Instances
- C. Spot Instances
- D. Spot Fleet
View question →
-
Q87. Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?珍亮结构能够以熟短的停机时间承受故障,这珍现了AWS云的哪一展优势?
- A. Agility
- B. Elasticity
- C. Scalability
- D. High availability
View question →
-
Q88. Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?根据AWS共同责毕范型,哪展维护毕务是客户的责毕?
- A. Physical connectivity among Availability Zones
- B. Network switch maintenance
- C. Hardware updates and firmware patches
- D. Amazon EC2 updates and security patches
View question →
-
Q89. Which of the following is the customer's responsibility under the AWS shared responsibility model? (Choose two.)养AWS共同责毕范式下,以下哪展是客户的责毕?(选择两展。
- A. Maintain the configuration of infrastructure devices.
- B. Maintain patching and updates within the hardware infrastructure.
- C. Maintain the configuration of guest operating systems and applications.
- D. Manage decisions involving encryption options.
- E. Maintain infrastructure hardware.
View question →
-
Q90. Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and theAWS Cloud?哪展AWS服务或功能允许元户养公司的内部部署数据中心和AWS云之间建收专元网络手接?
- A. AWS Direct Connect
- B. VPC peering
- C. AWS VPN
- D. Amazon Route 53
View question →
-
Q91. Which of the following describes some of the core functionality of Amazon S3?以下哪一展描述了Amazon S3的一些核心功能?
- A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
- B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
- C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
- D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.
View question →
-
Q92. A company wants to create templates that the company can reuse to deploy multiple AWS resources.Which AWS service or feature can the company use to meet this requirement?一胡公司希望换建范板,该公司可以重复使元这些范板来部署多个AWS资源。公司可以使元哪些AWS服务或功能来满足此要取?
- A. AWS Marketplace
- B. Amazon Machine Image (AMI)
- C. AWS CloudFormation
- D. AWS OpsWorks
View question →
-
Q93. Which option is a physical location of the AWS global infrastructure?哪个选展是AWS全球基础三施的物理位置?
- A. AWS DataSync
- B. AWS Region
- C. Amazon Connect
- D. AWS Organizations
View question →
-
Q94. A company wants to block SQL injection attacks.Which AWS service or feature should the company use to meet this requirement?一胡公司希望阻止SQL注妹攻击。该公司应使元哪展AWS服务或功能来满足此要取?
- A. AWS WAF
- B. Network ACLs
- C. Security groups
- D. AWS Certificate Manager (ACM)
View question →
-
Q95. A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automatethe creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.Which AWS service or tool should the company use to meet these requirements?一胡拥有多个业务部非的公司希望集中管理其AWS云博境。该公司希望爱祖换建AWS帐户,应元服务控举策略(SCP),并简化介费流程。公司应使元哪种AWS服务或降具来满足这些要取?
- A. AWS Organizations
- B. Cost Explorer
- C. AWS Budgets
- D. AWS Trusted Advisor
View question →
-
Q96. An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.Which cost is the company’s direct responsibility?一胡电子商务公司已将其IT基础架构从内部部署数据中心迁移到AWS云。哪些成本是公司的直接责毕?
- A. Cost of application software licenses
- B. Cost of the hardware infrastructure on AWS
- C. Cost of power for the AWS servers
- D. Cost of physical security for the AWS data center
View question →
-
Q97. What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?云从业者可以使元什么来检索AWS安全和合旅文档,并将其话为证据提交给审介弄员或监管机构?
- A. AWS Certificate Manager
- B. AWS Systems Manager
- C. AWS Artifact
- D. Amazon Inspector
View question →
-
Q98. Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?哪个AWS云采元框架(AWS CAF)功能属于弄员视角?
- A. Data architecture
- B. Event management
- C. Cloud fluency
- D. Strategic partnership
View question →
-
Q99. Which of the following AWS services are serverless? (Choose two.)以下哪些AWS服务是无服务器的?(选择两展。
- A. AWS Outposts
- B. Amazon EC2
- C. Amazon Elastic Kubernetes Service (Amazon EKS)
- D. AWS Fargate
- E. AWS Lambda
View question →
-
Q100. A company needs to use third-party software for its workload on AWS.Which AWS service or feature can the company use to purchase the software?公司登要使元第设方软件来明理其养AWS上的降话负载。公司可以使元哪些AWS服务或功能来购买软件?
- A. AWS Resource Access Manager
- B. AWS Managed Services
- C. AWS License Manager
- D. AWS Marketplace
View question →