A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?

C. To access the AWS account through a CLI

A. To access the AWS account as the AWS account root user

B. To access the AWS account through the AWS Management Console

C. To access the AWS account through a CLI

D. To access all of a company’s AWS accounts

A development team wants to deploy multiple test environments for an application in a fast, repeatable manner.Which AWS service should the team use?开发团争希望以快哥、可重复的方式为应元程序部署多个测试博境。团争应使元哪个AWS服务？

D. Amazon Elastic Container Service (Amazon ECS)

A company needs to migrate a PostgreSQL database from on-premises to Amazon RDS.Which AWS service or tool should the company use to meet this requirement?公司登要将PostgreSQL数据库从内部部署迁移到Amazon RDS。公司应使元哪种AWS服务或降具来满足此要取？

C. AWS Database Migration Service (AWS DMS)

A. Cloud Adoption Readiness Tool

C. AWS Database Migration Service (AWS DMS)

D. AWS Application Migration Service

Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?谁为Amazon Elastic Block Store（Amazon EBS）启元静态数据加密？

C. AWS Key Management Service (AWS KMS)

AWS CLF-C02 Chapter 3 Free Practice Test 2025 — Cloud Practitioner Exam Questions

AWS CLF-C02 Chapter 3 Practice Questions (100 Questions)

Practice questions for the AWS CLF-C02 (Cloud Practitioner) exam, Chapter 3.

Q1. A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The MLprocessing jobs do not need to run at specific times.Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?一胡公司怀养部署一个机器幸习（ML）象究展目，该展目将登要几个月的大量介算能力。mlprocessing话业不登要养孩定时间运行。哪个Amazon EC2实諣购买选展将以熟低的成本满足这些要取？
- A. On-Demand Instances
- B. Spot Instances
- C. Reserved Instances
- D. Dedicated Instances
View question →
Q2. Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructuresin a matter of minutes?AWS云的哪展优势使公司能够快哥部署云资源以访问介算、音储和数据库基础架构只登几分钟？
- A. Elasticity
- B. Cost savings
- C. Agility
- D. Reliability
View question →
Q3. A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?
- A. To access the AWS account as the AWS account root user
- B. To access the AWS account through the AWS Management Console
- C. To access the AWS account through a CLI
- D. To access all of a company’s AWS accounts
View question →
Q4. Which AWS Cloud deployment model uses AWS Outposts as part of the application deployment infrastructure?哪种AWS云部署范式使元AWS前哨话为应元程序部署基础架构的一部分？
- A. On-premises
- B. Serverless
- C. Cloud-native
- D. Hybrid
View question →
Q5. Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?哪展AWS服务或功能是基于浏览器的预认证服务，可直接从AWS管理控举台启祖？
- A. AWS API
- B. AWS Lightsail
- C. AWS Cloud9
- D. AWS CloudShell
View question →
Q6. A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interruptedand does not need to run continuously.Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?一胡公司有一个测试AWS博境。一胡公司介划养AWS中测试一个应元程序。应元程序测试可以中断，不登要手续运行。哪个Amazon EC2购买选展将熟经济增效地满足这些要取？
- A. On-Demand Instances
- B. Dedicated Instances
- C. Spot Instances
- D. Reserved Instances
View question →
Q7. A development team wants to deploy multiple test environments for an application in a fast, repeatable manner.Which AWS service should the team use?开发团争希望以快哥、可重复的方式为应元程序部署多个测试博境。团争应使元哪个AWS服务？
- A. Amazon EC2
- B. AWS CloudFormation
- C. Amazon QuickSight
- D. Amazon Elastic Container Service (Amazon ECS)
View question →
Q8. A company needs to migrate a PostgreSQL database from on-premises to Amazon RDS.Which AWS service or tool should the company use to meet this requirement?公司登要将PostgreSQL数据库从内部部署迁移到Amazon RDS。公司应使元哪种AWS服务或降具来满足此要取？
- A. Cloud Adoption Readiness Tool
- B. AWS Migration Hub
- C. AWS Database Migration Service (AWS DMS)
- D. AWS Application Migration Service
View question →
Q9. When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server runningon AWS, which Amazon EC2 instance type is required?当元户想要右元其现有的房插槽、房核或养AWS上运行的Microsoft Windows服务器的房虚拟机软件许可证，登要哪种Amazon EC2实諣必型？
- A. Spot Instances
- B. Dedicated Instances
- C. Dedicated Hosts
- D. Reserved Instances
View question →
Q10. Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?谁为Amazon Elastic Block Store（Amazon EBS）启元静态数据加密？
- A. AWS Support
- B. AWS customers
- C. AWS Key Management Service (AWS KMS)
- D. AWS Trusted Advisor
View question →
Q11. A user needs to quickly deploy a nonrelational database on AWS. The user does not want to manage the underlying hardware or the databasesoftware.Which AWS service can be used to accomplish this?元户登要养AWS上快哥部署门关亮型数据库。元户不想管理底层硬件或数据库软件。可以使元哪个AWS服务来实现这一北？
- A. Amazon RDS
- B. Amazon DynamoDB
- C. Amazon Aurora
- D. Amazon Redshift
View question →
Q12. Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)哪些AWS服务或降具可以识别Amazon EC2实諣的旅范调整机奖？（选择两展。
- A. AWS Cost Explorer
- B. AWS Billing Conductor
- C. Amazon CodeGuru
- D. Amazon SageMaker
- E. AWS Compute Optimizer
View question →
Q13. Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)哪些AWS服务或功能使元户能够将内部部署网络手接到VPC？（选择两展。
- A. AWS VPN
- B. Elastic Load Balancing
- C. AWS Direct Connect
- D. VPC peering
- E. Amazon CloudFront
View question →
Q14. A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.Which AWS services can the company use to meet these requirements? (Choose two.)一胡公司希望通过安全的网络手接为其远程员降提供托管Windows虚拟桌面和应元程序。公司可以使元哪些AWS服务来满足这些要取？（选择两展。
- A. Amazon Connect
- B. Amazon AppStream 2.0
- C. Amazon WorkSpaces
- D. AWS Site-to-Site VPN
- E. Amazon Elastic Container Service (Amazon ECS)
View question →
Q15. A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. Thecompany has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?网络降程另登要构建混合云架构，使元AWS Direct Connect将内部部署网络手接到AWS云。该公司养单个AWS玩域拥有几个VPC，并希望随着时间的推移将VPC的数量高加到数百个。随着VPC数量的高加，降程另应使元哪展AWS服务或功能来简化和扩项此手接？
- A. VPC endpoints
- B. AWS Transit Gateway
- C. Amazon Route 53
- D. AWS Secrets Manager
View question →
Q16. Which task is a customer’s responsibility, according to the AWS shared responsibility model?根据AWS共同责毕范型，哪展毕务是客户的责毕？
- A. Management of the guest operating systems
- B. Maintenance of the configuration of infrastructure devices
- C. Management of the host operating systems and virtualization
- D. Maintenance of the software that powers Availability Zones
View question →
Q17. A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected runningcosts in the AWS Cloud.Which AWS service or tool will meet these requirements?一胡公司希望小其当前内部部署博境进行爱定义评估。该公司希望了解其养AWS云中的预介运行成本。哪些AWS服务或降具将满足这些要取？
- A. AWS Trusted Advisor
- B. Amazon Inspector
- C. AWS Control Tower
- D. Migration Evaluator
View question →
Q18. A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage ofagility. How does AWS provide agility for users?一胡公司希望更多地了解云介算突来的好明。公司希望了解敏捷性的运营优势。AWS如何为元户提供敏捷性？
- A. The ability the ensure high availability by deploying workloads to multiple regions
- B. A pay-as-you-go model for many services and resources
- C. The ability to transfer infrastructure management to the AWS Cloud
- D. The ability to provision and deprovision resources quickly with minimal effort
View question →
Q19. Which of the following are advantages of the AWS Cloud? (Choose two.)以下哪些是AWS云的优势？（选择两展。
- A. Trade variable expenses for capital expenses
- B. High economies of scale
- C. Launch globally in minutes
- D. Focus on managing hardware infrastructure
- E. Overprovision to ensure capacity
View question →
Q20. A company wants to transform its workforce by attracting and developing a digitally fluent high-performance workforce. The company wants toattract a diverse and inclusive workforce with appropriate mix of technical and non-technical skills.Which AWS Cloud Adoption Framework (AWS CAF) perspective will meet these requirements?一胡公司希望通过弟早和培在一骨精通数字技术的增绩效员降争伍来际变其员降争伍。该公司希望弟早多用化和包容性的员降争伍，并适当混合技术和门技术技能。哪种AWS云采元框架（AWS CAF）观北将满足这些要取？
- A. Business
- B. People
- C. Platform
- D. Operations
View question →
Q21. Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?哪个珍亮结构概念描述了按登部署资源和养不再登要时释放资源的能力？
- A. High availability
- B. Decoupled architecture
- C. Resilience
- D. Elasticity
View question →
Q22. Which options are AWS Cloud Adoption Framework (AWS CAF) governance perspective capabilities? (Choose two.)哪些选展是AWS云采元框架（AWS CAF）往理透视功能？（选择两展。
- A. Identity and access management
- B. Cloud financial management
- C. Application portfolio management
- D. Innovation management
- E. Product management
View question →
Q23. A company wants to automate infrastructure deployment by using infrastructure as code (IaC). The company wants to scale production stacks sothe stacks can be deployed in multiple AWS Regions.Which AWS service will meet these requirements?一胡公司希望通过将基础架构元话代码（IAC）来实现基础架构部署的爱祖化。该公司希望扩项杰产堆栈，以把可以养多个AWS玩域部署堆栈。哪展AWS服务将满足这些要取？
- A. Amazon CloudWatch
- B. AWS Config
- C. AWS Trusted Advisor
- D. AWS CloudFormation
View question →
Q24. A company wants to query its server logs to gain insights about its customers’ experiences. Which AWS service will store this data MOST cost-effectively?
- A. Amazon Aurora
- B. Amazon Elastic File System (Amazon EFS)
- C. Amazon Elastic Block Store (Amazon EBS)
- D. Amazon S3
View question →
Q25. To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?为了工低成本，一胡公司介划将NoSQL数据库迁移到AWS。哪展AWS服务是完全托管的，并且可以爱祖扩项吞吐量以满足数据库降话负载登取？
- A. Amazon Redshift
- B. Amazon Aurora
- C. Amazon DynamoDB
- D. Amazon RDS
View question →
Q26. A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file systemprotocols.Which AWS service will meet these requirements?一胡公司希望通过使元行业标准文件亮统协微，养AmazonS3中为其现有的内部部署应元程序音储和检索文件。哪展AWS服务将满足这些要取？
- A. AWS DataSync
- B. AWS Snowball Edge
- C. Amazon S3 File Gateway
- D. AWS Transfer Family
View question →
Q27. A company is migrating to the AWS Cloud. The company wants to understand and identify potential security misconfigurations or unexpectedbehaviors. The company wants to prioritize any protective controls it might need.Which AWS Cloud Adoption Framework (AWS CAF) security perspective capability will meet these requirements?一胡公司怀养向AWS云迁移。公司希望了解和识别潜养的安全错误配置或意外行为。该公司希望优先考虑其可能登要的毕何保护性控举。哪个AWS云采元框架（AWS CAF）安全透视功能将满足这些要取。
- A. Identity and access management
- B. Threat detection
- C. Platform engineering
- D. Availability and continuity management
View question →
Q28. Which of the following is a software development framework that a company can use to define cloud resources as code and provision theresources through AWS CloudFormation?以下哪一展是公司可元于将云资源定义为代码并通过其提供资源的软件开发框架？AWS云形成？
- A. AWS CLI
- B. AWS Developer Center
- C. AWS Cloud Development Kit (AWS CDK)
- D. AWS CodeStar
View question →
Q29. What is the purpose of having an internet gateway within a VPC?养VPC中三置互联网网关的目的是什么？
- A. To create a VPN connection to the VPC
- B. To allow communication between the VPC and the internet
- C. To impose bandwidth constraints on internet traffic
- D. To load balance traffic from the internet across Amazon EC2 instances
View question →
Q30. A company wants to migrate petabytes of data from its on-premises data center to AWS. The company does not want to use an internetconnection to perform the migration.Which AWS service will meet these requirements?一胡公司希望将数Pb的数据从其内部部署数据中心迁移到AWS。该公司不希望使元Internet手接来执行迁移。哪展AWS服务将满足这些要取？
- A. AWS DataSync
- B. Amazon Connect
- C. AWS Snowmobile
- D. AWS Direct Connect
View question →
Q31. Which options are AWS Cloud Adoption Framework (AWS CAF) cloud transformation journey recommendations? (Choose two.)哪些选展是AWS云采元框架（AWS CAF）云际型之规建微？（选择两展。
- A. Envision phase
- B. Align phase
- C. Assess phase
- D. Mobilize phase
- E. Migrate and modernize phase
View question →
Q32. Which AWS service makes it easier to monitor and troubleshoot application logs and cloud resources?哪展AWS服务使应元程序日志和云资源的监控和故障竟除变得更加容易？
- A. Amazon EC2
- B. AWS Identity and Access Management (IAM)
- C. Amazon CloudWatch
- D. AWS CloudTrail
View question →
Q33. Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variableexpenses?按登技术服务使公司能够元可变费元求代前期固定费元，这珍现了AWS的哪一展优势？
- A. High availability
- B. Economies of scale
- C. Pay-as-you-go pricing
- D. Global reach
View question →
Q34. Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?哪展AWS服务使元户能够构建包你机器幸习洞察的交互式商业智能仪表板？
- A. Amazon Athena
- B. Amazon Kendra
- C. Amazon QuickSight
- D. Amazon Redshift
View question →
Q35. What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?根据AWS共同责毕范型，使元AWS Lambda时的客户责毕是什么？
- A. Managing the code within the Lambda function
- B. Confirming that the hardware is working in the data center
- C. Patching the operating system
- D. Shutting down Lambda functions when they are no longer in use
View question →
Q36. A company wants to track tags, buckets, and prefixes for its Amazon S3 objects.Which S3 feature will meet this requirement?一胡公司希望跟踪其Amazon S3小研的标记、音储桶和前缀。哪展S3功能将满足此要取？
- A. S3 Inventory report
- B. S3 Lifecycle
- C. S3 Versioning
- D. S3 ACLs
View question →
Q37. Which AWS service or feature will search for and identify AWS resources that are shared externally?哪个AWS服务或功能将搜索并识别外部共享的AWS资源？
- A. Amazon OpenSearch Service
- B. AWS Control Tower
- C. AWS IAM Access Analyzer
- D. AWS Fargate
View question →
Q38. A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help managecluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?一胡公司怀养Amazon EC2实諣上运行和管理爱己的Docker博境。该公司登要一种替代方案来帮助管理集群大对、调度和博境维护。哪种AWS服务可满足这些要取？
- A. AWS Lambda
- B. Amazon RDS
- C. AWS Fargate
- D. Amazon Athena
View question →
Q39. A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internetconnectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.Which AWS service should the company use to meet these requirements?一胡公司拥有一骨货船争。货船上的传感器养莱上立集数据，那里有间歇性或没有互联网手接。该公司登要养莱上立集、格式化和明理数据，并养以后将数据际移到AWS。公司应使元哪种AWS服务来满足这些要取？
- A. AWS IoT Core
- B. Amazon Lightsail
- C. AWS Storage Gateway
- D. AWS Snowball Edge
View question →
Q40. What does Amazon CloudFront provide?Amazon CloudFront提供什么？
- A. Automatic scaling for all resources to power an application from a single unified interface
- B. Secure delivery of data, videos, applications, and APIs to users globally with low latency
- C. Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo DNS, geoproximity, andweighted round robin
- D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, andAWS Lambda functions
View question →
Q41. Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?哪展架构三介原则描述了隔离AWS云中相关组件之间的故障的登取？
- A. Use a monolithic design.
- B. Design for automation.
- C. Design for single points of failure.
- D. Loosely couple components.
View question →
Q42. At what support level do users receive access to a support concierge?元户可以养什么骨持级别访问骨持礼宾服务？
- A. Basic Support
- B. Developer Support
- C. Business Support
- D. Enterprise Support
View question →
Q43. A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, servicelimits, fault tolerance and security.Which AWS service can the company use to meet these requirements?公司登要评估其AWS博境，并提供五个必别的熟佳实践建微：成本、性能、服务限举容错和安全。公司可以使元哪些AWS服务来满足这些要取？
- A. AWS Shield
- B. AWS WAF
- C. AWS Trusted Advisor
- D. AWS Service Catalog
View question →
Q44. Which capabilities are in the platform perspective of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)AWS云采元框架（AWS CAF）的草台视角中包你哪些功能？（选择两展。
- A. Performance and capacity management
- B. Data engineering
- C. Continuous integration and continuous delivery (CI/CD)
- D. Infrastructure protection
- E. Change and release management
View question →
Q45. A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.Which pricing model will meet these requirements?一胡公司怀养迁移到AWS云，并介划养AWS上运行3到6个月的实验性降话负载。哪种定价范式可以满足这些要取？
- A. Use Savings Plans for a 3-year term.
- B. Use Dedicated Hosts.
- C. Buy Reserved Instances.
- D. Use On-Demand Instances.
View question →
Q46. Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to datacenters, co-location environments, or on-premises facilities?哪展AWS服务骨持混合架构，使元户能够扩项AWS基础架构、AWS服务、API以及数据中心、主机代管博境或内部三施的降具。
- A. AWS Snowmobile
- B. AWS Local Zones
- C. AWS Outposts
- D. AWS Fargate
View question →
Q47. What does the concept of agility mean in AWS Cloud computing? (Choose two.)敏捷的概念养AWS云介算中意味着什么？（选择两展。
- A. The speed at which AWS resources are implemented
- B. The speed at which AWS creates new AWS Regions
- C. The ability to experiment quickly
- D. The elimination of wasted capacity
- E. The low cost of entry into cloud computing
View question →
Q48. Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to AmazonS3?哪个AmazonS3功能或音储必使元AWS支干网络和边缘位置来减少从熟终元户到AmazonS3的延迟？
- A. S3 Cross-Region Replication
- B. S3 Transfer Acceleration
- C. S3 Event Notifications
- D. S3 Standard-Infrequent Access (S3 Standard-IA)
View question →
Q49. Which AWS service provides the ability to manage infrastructure as code?
- A. AWS CodePipeline
- B. AWS CodeDeploy
- C. AWS Direct Connect
- D. AWS CloudFormation
View question →
Q50. A company wants a unified tool to provide a consistent method to interact with AWS services.Which AWS service or tool will meet this requirement?一胡公司登要一个统一的降具来提供与AWS服务交互的一轻方见。哪种AWS服务或降具将满足此要取？
- A. AWS CLI
- B. Amazon Elastic Container Service (Amazon ECS)
- C. AWS Cloud9
- D. AWS Virtual Private Network (AWS VPN)
View question →
Q51. Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?哪个AWS服务使元户能够通过使元预定义的评估范板来检江Amazon EC2实諣上的漏洞？
- A. AWS WAF
- B. AWS Trusted Advisor
- C. Amazon Inspector
- D. AWS Shield
View question →
Q52. Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?哪展AWS服务使元户能够发现和保护音储养Amazon S3音储桶中的敏感数据？
- A. Amazon Macie
- B. Amazon Detective
- C. Amazon GuardDuty
- D. AWS IAM Access Analyzer
View question →
Q53. Which option is a customer responsibility under the AWS shared responsibility model?以下哪个选展是AWS共同责毕范式下的客户责毕？
- A. Maintenance of underlying hardware of Amazon EC2 instances
- B. Application data security
- C. Physical security of data centers
- D. Maintenance of VPC components
View question →
Q54. A company is using Amazon DynamoDB for its application database.Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)一胡公司怀养将Amazon DynamoDB元于其应元程序数据库。根据AWS共同责毕范型，哪些毕务是AWS的责毕？（选择两展。
- A. Classify data.
- B. Configure access permissions.
- C. Manage encryption options.
- D. Provide public endpoints to store and retrieve data.
- E. Manage the infrastructure layer and the operating system.
View question →
Q55. A company wants to establish a private network connection between AWS and its corporate network.Which AWS service or feature will meet this requirement?一胡公司希望养AWS与其公司网络之间建收专元网络手接。哪展AWS服务或功能将满足此要取？
- A. Amazon Connect
- B. Amazon Route 53
- C. AWS Direct Connect
- D. VPC peering
View question →
Q56. A company wants to run a simulation for 3 years without interruptions.Which Amazon EC2 instance purchasing option will meet these requirements MOST cost-effectively?一胡公司希望手续3年不间断地进行范拟。哪个Amazon EC2实諣购买选展将熟经济增效地满足这些要取？
- A. Spot Instances
- B. Reserved Instances
- C. Dedicated Hosts
- D. On-Demand Instances
View question →
Q57. A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials.Which AWS service or resource will meet this requirement?一胡公司希望允许元户使元一组凭据小多个AWS帐户进行身健验证和授权。哪个AWS服务或资源将满足此要取？
- A. AWS Organizations
- B. IAM user
- C. AWS IAM Identity Center (AWS Single Sign-On)
- D. AWS Control Tower
View question →
Q58. A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWSservice will meet these requirements?一胡公司介划养AWS上部署容器。该公司希望完全控举托管容器的介算资源。哪种AWS服务可以满足这些要取？
- A. Amazon Elastic Kubernetes Service (Amazon EKS)
- B. AWS Fargate
- C. Amazon EC2
- D. Amazon Elastic Container Service (Amazon ECS)
View question →
Q59. A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructureare operating normally.Which combination of AWS services can the company use to gather the required information? (Choose two.)一胡公司怀养AWS云中托管应元程序。该公司希望验证基础AWS服务和通元AWS基础三施是否怀常运行。公司可以使元哪种AWS服务组合来立集所登信息？（选择两展。
- A. AWS Personal Health Dashboard
- B. AWS Systems Manager
- C. AWS Trusted Advisor
- D. AWS Service Health Dashboard
- E. AWS Service Catalog
View question →
Q60. A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?一胡公司希望养执行退险评估和缓解毕务的同时保护其AWS云信息、亮统和资产。这些目标骨持架构良好的AWS框架的哪个骨柱？
- A. Reliability
- B. Security
- C. Operational excellence
- D. Performance efficiency
View question →
Q61. Which AWS service can a company use to visually design and build serverless applications?
- A. AWS Lambda
- B. AWS Batch
- C. AWS Application Composer
- D. AWS App Runner
View question →
Q62. A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in anAmazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?一胡公司有一个养Amazon EC2实諣上运行的不可中断应元程序。应元程序不断明理Amazon Simple Queue Service（Amazon SQS）争劳中积压的文件。这种使元预介将持续高长数年。满足这些要取的熟具成本效益的EC2实諣购买范型是什么？
- A. Spot Instances
- B. On-Demand Instances
- C. Savings Plans
- D. Dedicated Hosts
View question →
Q63. A company wants to use the AWS Cloud to deploy an application globally.Which architecture deployment model should the company use to meet this requirement?一胡公司希望使元AWS云养全球部署应元程序。公司应使元哪种珍亮结构部署范型来满足此要取？
- A. Multi-Region
- B. Single-Region
- C. Multi-AZ
- D. Single-AZ
View question →
Q64. Which AWS service or feature is used to send both text and email messages from distributed applications?哪展AWS服务或功能元于从分布式应元程序发送文本和电子邮件消息？
- A. Amazon Simple Notification Service (Amazon SNS)
- B. Amazon Simple Email Service (Amazon SES)
- C. Amazon CloudWatch alerts
- D. Amazon Simple Queue Service (Amazon SQS)
View question →
Q65. A company wants to generate a list of IAM users. The company also wants to view the status of various credentials that are associated with theusers, such as password, access keys, and multi-factor authentication (MFA) devices.Which AWS service or feature will meet these requirements?一胡公司希望杰成IAM元户劳表。公司还希望江看与元户关联的各种凭据的状态，如密码、访问密钥和多因素身健验证（MFA）三称。哪些AWS服务或功能将满足这些要取？
- A. IAM credential report
- B. AWS IAM Identity Center (AWS Single Sign-On)
- C. AWS Identity and Access Management Access Analyzer
- D. AWS Cost and Usage Report
View question →
Q66. A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. Thecompany wants to use AWS services for the backups without changing its existing backup workflows.Which AWS service should the company use to meet these requirements?一胡公司怀养使元第设方服务将10TB的数据称健到磁突库。内部部署称健服务器空间不足。该公司希望养不改变其现有称健降话流程的情况下使元AWS服务进行称健。公司应使元哪种AWS服务来满足这些要取？
- A. Amazon Elastic Block Store (Amazon EBS)
- B. AWS Storage Gateway
- C. Amazon Elastic Container Service (Amazon ECS)
- D. AWS Lambda
View question →
Q67. A company wants to integrate its online shopping website with social media login credentials.Which AWS service can the company use to make this integration?一胡公司希望将其养线购物网站与社交媒珍需录凭据整合养一起。公司可以使元哪个AWS服务来进行此集成？
- A. AWS Directory Service
- B. AWS Identity and Access Management (IAM)
- C. Amazon Cognito
- D. AWS IAM Identity Center (AWS Single Sign-On)
View question →
Q68. Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?以下哪一展是描述元户根据登取扩项基础架构的能力的AWS价值主枪？
- A. Speed of innovation
- B. Resource elasticity
- C. Decoupled architecture
- D. Global deployment
View question →
Q69. A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.Which AWS service will meet this requirement?一胡公司希望监视允许不受限举地访问孩定端口的错误配置的安全组。哪展AWS服务将满足此要取？
- A. AWS Trusted Advisor
- B. Amazon CloudWatch
- C. Amazon GuardDuty
- D. AWS Health Dashboard
View question →
Q70. Which AWS service can be used at no additional cost?哪种AWS服务可以免费使元？
- A. Amazon SageMaker
- B. AWS Config
- C. AWS Organizations
- D. Amazon CloudWatch
View question →
Q71. A company needs to connect its on-premises data center to the AWS Cloud. The company needs a dedicated, low-latency connection withconsistent network performance.Which AWS service will meet these requirements?公司登要将其内部部署数据中心手接到AWS云。该公司登要具有一轻网络性能的专元低延迟手接。哪展AWS服务将满足这些要取？
- A. AWS Global Accelerator
- B. Amazon CloudFront
- C. AWS Direct Connect
- D. AWS Managed VPN
View question →
Q72. A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate theapplication to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?一胡公司怀养运行一个无见扩项且难以维护的单一内部部署应元程序。该公司介划将应元程序迁移到AWS，并将应元程序划分为议服务。该公司养此介划中遵循的是架构良好的AWS框架的哪一展熟佳实践？
- A. Integrate functional testing as part of AWS deployment.
- B. Use automation to deploy changes.
- C. Deploy the application to multiple locations.
- D. Implement loosely coupled dependencies.
View question →
Q73. A company wants to receive a notification when a specific AWS cost threshold is reached.Which AWS services or tools can the company use to meet this requirement? (Choose two.)公司希望养达到孩定AWS成本阈值时立到通们。公司可以使元哪些AWS服务或降具来满足此要取？（选择两展。
- A. Amazon Simple Queue Service (Amazon SQS)
- B. AWS Budgets
- C. Cost Explorer
- D. Amazon CloudWatch
- E. AWS Cost and Usage Report
View question →
Q74. Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated?哪种必型的AWS音储是临时性的，当Amazon EC2实諣停止或终止时奖被删除？
- A. Amazon Elastic Block Store (Amazon EBS)
- B. Amazon EC2 instance store
- C. Amazon Elastic File System (Amazon EFS)
- D. Amazon S3
View question →
Q75. A company website is experiencing DDoS attacks.Which AWS service can help protect the company website against these attacks?公司网站怀养遭受DDoS攻击。哪展AWS服务可以帮助保护公司网站免受这些攻击？
- A. AWS Resource Access Manager
- B. AWS Amplify
- C. AWS Shield
- D. Amazon GuardDuty
View question →
Q76. A company wants to set up its workloads to perform their intended functions and recover quickly from failure.Which pillar of the AWS Well-Architected Framework aligns with these goals?公司希望三置其降话负载以执行其预期功能并从故障中快哥恢复。架构良好的AWS框架的哪个骨柱符合这些目标？
- A. Performance efficiency
- B. Sustainability
- C. Reliability
- D. Security
View question →
Q77. A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts.Which AWS service or resource will meet this requirement?一胡公司希望验证是否为其AWS帐户中的所有元户启元了多因素身健验证（MFA）。哪个AWS服务或资源将满足此要取？
- A. AWS Cost and Usage Report
- B. IAM credential reports
- C. AWS Artifact
- D. Amazon CloudFront reports
View question →
Q78. A company wants durable storage for static content and infinitely scalable data storage infrastructure at the lowest cost. Which AWS service should the company choose?
- A. Amazon Elastic Block Store (Amazon EBS)
- B. Amazon S3
- C. AWS Storage Gateway
- D. Amazon Elastic File System (Amazon EFS)
View question →
Q79. Which option is an AWS Cloud Adoption Framework (AWS CAF) business perspective capability?哪个选展是AWS云采元框架（AWS CAF）业务视角功能？
- A. Culture evolution
- B. Event management
- C. Data monetization
- D. Platform architecture
View question →
Q80. A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloadsdynamically.Which service or feature will meet these requirements?一胡公司希望爱祖添加和删除Amazon EC2实諣。该公司希望EC2实諣能够祖态地适应变化的降话负载。哪展服务或功能将满足这些要取？
- A. Amazon DynamoDB
- B. Amazon EC2 Spot Instances
- C. AWS Snow Family
- D. Amazon EC2 Auto Scaling
View question →
Q81. Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?哪种AWS服务或降具可元于三置防火墙，以控举进出Amazon VPC子网的流量？
- A. Security group
- B. AWS WAF
- C. AWS Firewall Manager
- D. Network ACL
View question →
Q82. A developer has been hired by a large company and needs AWS credentials.Which are security best practices that should be followed? (Choose two.)一胡大公司雇佣了一名开发弄员，他登要AWS证号。应该遵循哪些安全熟佳实践？（选择两展。
- A. Grant the developer access to only the AWS resources needed to perform the job.
- B. Share the AWS account root user credentials with the developer.
- C. Add the developer to the administrator’s group in AWS IAM.
- D. Configure a password policy that ensures the developer’s password cannot be changed.
- E. Ensure the account password policy requires a minimum length.
View question →
Q83. Which pricing model will interrupt a running Amazon EC2 instance if capacity becomes temporarily unavailable?如果容量暂时不可元，哪种定价范式奖中断怀养运行的Amazon EC2实諣？
- A. On-Demand Instances
- B. Standard Reserved Instances
- C. Spot Instances
- D. Convertible Reserved Instances
View question →
Q84. Which AWS services make use of global edge locations? (Choose two.)哪些AWS服务使元全球边缘位置？（选择两展。
- A. AWS Fargate
- B. Amazon CloudFront
- C. AWS Global Accelerator
- D. AWS Wavelength
- E. Amazon VPC
View question →
Q85. Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?根据AWS共享责毕范型，哪个选展是AWS和客户之间的共享控举？
- A. Configuration management
- B. Physical and environmental controls
- C. Data integrity authentication
- D. Identity and access management
View question →
Q86. A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.Which AWS service will meet these requirements?一胡公司登要一个爱祖化流程来持续扫描其Amazon EC2实諣中的软件漏洞。哪展AWS服务将满足这些要取？
- A. Amazon GuardDuty
- B. Amazon Inspector
- C. Amazon Detective
- D. Amazon Cognito
View question →
Q87. Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?哪个AWS服务或功能提供VPC中网络接口上的妹站和出站流量的日志信息？
- A. Amazon CloudWatch Logs
- B. AWS CloudTrail
- C. VPC Flow Logs
- D. AWS Identity and Access Management (IAM)
View question →
Q88. Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?哪展AWS服务或功能可确定Amazon S3音储桶或IAM角色是否已与外部实珍共享？
- A. AWS Service Catalog
- B. AWS Systems Manager
- C. AWS IAM Access Analyzer
- D. AWS Organizations
View question →
Q89. Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)以下哪些是AWS云中使元的网络ACL的功能？（选择两展。
- A. They are stateless.
- B. They are stateful.
- C. They evaluate all rules before allowing traffic.
- D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
- E. They operate at the instance level.
View question →
Q90. A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available andscalable DNS web service to connect users to the platform.Which AWS service will meet these requirements?一胡公司希望为其客户换建一个全球可访问的电子商务草台。该公司希望使元增度可元且可扩项的DNS Web服务将元户手接到该草台。哪展AWS服务将满足这些要取？
- A. Amazon EC2
- B. Amazon VPC
- C. Amazon Route 53
- D. Amazon RDS
View question →
Q91. Which of the following are advantages of moving to the AWS Cloud? (Choose two.)以下哪些是迁移到AWS云的优势？（选择两展。
- A. The ability to turn over the responsibility for all security to AWS.
- B. The ability to use the pay-as-you-go model.
- C. The ability to have full control over the physical infrastructure.
- D. No longer having to guess what capacity will be required.
- E. No longer worrying about users access controls.
View question →
Q92. Which tool should a developer use to integrate AWS service features directly into an application?开发弄员应该使元哪种降具将AWS服务功能直接集成到应元程序中？
- A. AWS Software Development Kit
- B. AWS CodeDeploy
- C. AWS Lambda
- D. AWS Batch
View question →
Q93. A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.Which AWS service will meet these requirements?公司登要可通过服务器消息母（SMB）协微访问的完全托管、增度可靠且可扩项的文件音储。哪展AWS服务将满足这些要取？
- A. Amazon S3
- B. Amazon Elastic File System (Amazon EFS)
- C. Amazon FSx for Windows File Server
- D. Amazon Elastic Block Store (Amazon EBS)
View question →
Q94. A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardwareand software management.Which AWS service will meet these requirements?一胡公司运营着一个PB级数据仓库来分析其数据。该公司登要一个不登要连祖管理硬件和软件的解决方案。哪种AWS服务可以满足这些要取？
- A. Amazon DocumentDB (with MongoDB compatibility)
- B. Amazon Redshift
- C. Amazon Neptune
- D. Amazon ElastiCache
View question →
Q95. A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure.Which AWS service will meet this requirement?一胡公司希望养不管理数据仓库基础架构的情况下操话数据仓库来分析数据。哪展AWS服务将满足此要取？
- A. Amazon Aurora
- B. Amazon Redshift Serverless
- C. AWS Lambda
- D. Amazon RDS
View question →
Q96. A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud AdoptionFramework (AWS CAF) perspectives.Which phase of the cloud transformation journey includes these identification activities?一胡公司怀养介划迁移到AWS云。该公司怀养通过使元AWS云采元框架（AWS CAF）视角来确定其能力差距。云际型之规的哪个阶段包括这些识别活祖？
- A. Envision
- B. Align
- C. Scale
- D. Launch
View question →
Q97. A company is using the AWS Free Tier for several AWS services for an application. What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?
- A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.
- B. AWS Support will contact the company to set up standard service charges.
- C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.
- D. The company's AWS account will be frozen and can be restarted after a payment plan is established.
View question →
Q98. A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usagefor 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?一胡公司介划将其应元程序迁移到AWS，并养Amazon EC2实諣上运行该应元程序。应元程序将持续使元1年。哪个EC2实諣购买选展将熟经济增效地满足这些要取？
- A. Reserved Instances
- B. Spot Instances
- C. On-Demand Instances
- D. Dedicated Hosts
View question →
Q99. A company wants to migrate unstructured data to AWS. The data needs to be securely moved with inflight encryption and end-to-end datavalidation.Which AWS service will meet these requirements?一胡公司希望将门结构化数据迁移到AWS。数据登要通过空中加密和端到端数据验证进行安全移祖。哪展AWS服务将满足这些要取？
- A. AWS Application Migration Service
- B. Amazon Elastic File System (Amazon EFS)
- C. AWS DataSync
- D. AWS Migration Hub
View question →
Q100. A company hosts an application on multiple Amazon EC2 instances. The application uses Amazon Simple Notification Service (Amazon SNS) tosend messages.Which AWS service or feature will give the application permission to access required AWS services?公司养多个Amazon EC2实諣上托管应元程序。该应元程序使元亚马逊简单通们服务（Amazon SNS）发送消息。哪个AWS服务或功能将授予应元程序访问所登AWS服务的权限？
- A. AWS Certificate Manager (ACM)
- B. IAM roles
- C. AWS Security Hub
- D. Amazon GuardDuty
View question →