AWS Certified Cloud Practitioner712 questions across 72 pages are complete and free, with no account or card.
712 questions in this bank
Free access · progress saved on this device
A company needs a bridge between technology and business to help evolve to a culture of continuous growth and learning. Which perspective in the AWS Cloud Adoption Framework (AWS CAF) serves as this bridge?
Answer: A
Which option is a responsibility of AWS under the AWS shared responsibility model?
Answer: C
Which AWS service or resource can identify and provide reports on IAM resources in one AWS account that is shared with another AWS account?
Answer: C
C. AWS Identity and Access Management Access Analyzer - It helps identify and analyze resource access policies including those shared with other AWS accounts. IAM Credential report gives information about user credentials in an AWS account but it does not do cross account sharing.
Source: Adapted from community discussion — Moobled
Which AWS Well-Architected Framework pillar focuses on structured and streamlined allocation of computing resources?
Answer: C
Which AWS Cloud Adoption Framework (AWS CAF) capabilities belong to the governance perspective? (Choose two.)
Answer: AD
A company wants to use AWS Managed Services (AMS) for operational support and wants to understand the scope of AMS. Which AMS feature will meet these requirements?
Answer: A
A. Landing zone and network management AWS Managed Services (AMS) offers landing zone and network management as part of its scope to assist companies in setting up and managing their AWS environment. This includes establishing a secure and well-architected foundation for workloads, setting up network connectivity, managing accounts and users, implementing security controls, and ensuring compliance with best practices and regulatory requirements.
Source: Adapted from community discussion — chalaka
A company wants to migrate its on-premises NoSQL workload to Amazon DynamoDB. Which AWS service will meet this requirement?
Answer: B
B. AWS Database Migration Service (AWS DMS) AWS DMS helps to migrate databases to AWS quickly and securely. It supports various source and target databases, including NoSQL databases like MongoDB, Cassandra, and Couchbase, making it suitable for migrating an on-premises NoSQL workload to Amazon DynamoDB.
Source: Adapted from community discussion — chalaka
A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?
Answer: C
A. Use the account root user access keys for administrative tasks: It is not recommended to use the root user's access keys for day-to-day administrative tasks. The root user has unrestricted access, and using its access keys poses security risks. B. Grant broad permissions so that all company employees can access the resources they need: It's advisable to follow the principle of least privilege, granting users only the permissions they need to perform their tasks. C. Turn on multi-factor authentication (MFA) for added security during the login process: Enabling multi-factor authentication (MFA) is a security best practice. It adds an extra layer of protection by requiring users to provide a second form of authentication in addition to their password. This helps prevent unauthorized access even if credentials are compromised. D. Avoid rotating credentials to prevent issues in production applications: Regularly rotating credentials, such as access keys and passwords, enhances security by reducing the window of opportunity for attackers.
Source: Adapted from community discussion — TheFivePips
A company is in the process of finding correct Amazon EC2 instance types and sizes to meet its performance and capacity requirements. The company wants to find the lowest possible cost. Which option accurately characterizes the company's actions?
Answer: C
C. Rightsizing Rightsizing involves finding the most suitable instance types and sizes to match performance and capacity requirements while optimizing costs. This process ensures that resources are neither underutilized nor over-provisioned, helping to minimize expenses while meeting workload demands.
Source: Adapted from community discussion — chalaka
A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications. Which AWS service will meet these requirements?
Answer: D
D. AWS IAM Identity Center (AWS Single Sign-On) AWS IAM Identity Center, also known as AWS Single Sign-On (SSO), is a service that simplifies the management of access to AWS accounts and business applications by providing centralized identity and access management. With AWS SSO, companies can create and manage workforce users, control their access to AWS accounts and applications using single sign-on, and enforce multi-factor authentication for enhanced security. This service helps streamline access management and ensures consistent security practices across the organization's AWS environment.
Source: Adapted from community discussion — chalaka
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CLF-C02 practice, question 311. 712 questions available.
Version 1.0.0. How we source questions