AWS Certified Cloud Practitioner712 questions across 72 pages are complete and free, with no account or card.
712 questions in this bank
Free access · progress saved on this device
A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use. Which AWS feature or service will meet this requirement?
Answer: B
The correct AWS feature or service that meets the requirement of generating a report listing the status of MFA devices for all users in an AWS account is B. IAM credential reports.
Source: Adapted from community discussion — 2dd0f97
A company wants to use machine learning capabilities to analyze log data from its Amazon EC2 instances and efficiently conduct security investigations. Which AWS service will meet these requirements?
Answer: C
C. Amazon Detective Amazon Detective makes it easy to analyze, investigate, and quickly identify the root cause of security issues or suspicious activities. It automatically collects log data from your AWS resources and uses machine learning, statistical analysis, and graph theory to build a linked set of data that enables you to easily conduct investigations. While Amazon GuardDuty is effective for detecting threats, Amazon Detective specializes in analyzing and investigating the security findings that GuardDuty and other services detect, making it an excellent choice for efficiently conducting security investigations with machine learning capabilities.
Source: Adapted from community discussion — Asylgul
A company is launching a mobile app in the AWS Cloud. The company wants the app's users to sign in through social media identity providers (IdPs). Which AWS service will meet this requirement?
Answer: B
B. Amazon Cognito Amazon Cognito provides authentication, authorization, and user management for web and mobile apps. Users can sign in directly with a user name and password, or through third-party identity providers such as Facebook, Google, and Amazon, as well as through enterprise identity providers via SAML 2.0. Amazon Cognito facilitates the integration of social media identity providers (IdPs), making it a suitable choice for the company's mobile app to allow users to sign in through social media.
Source: Adapted from community discussion — Asylgul
Which complimentary AWS service or tool creates data-driven business cases for cloud planning?
Answer: A
A its correct answer The complimentary AWS service that helps create data-driven business cases for cloud planning is AWS Migration Evaluator, formerly known as TSO Logic. AWS Migration Evaluator assists organizations in understanding the cost-benefits of moving to AWS by analyzing their current on-premises IT infrastructure usage and costs. It provides detailed reports and insights, enabling decision-makers to build compelling, data-driven business cases for cloud migration and planning. This tool helps in identifying the most cost-effective AWS services to meet an organization's specific needs, estimating the potential cost savings, and planning the migration strategy effectively.
Source: Adapted from community discussion — Asylgul
Which cloud concept is demonstrated by using AWS Cost Explorer?
Answer: A
A. Rightsizing AWS Cost Explorer is a tool that enables you to visualize, understand, and manage your AWS costs and usage over time. This aligns with the concept of rightsizing, which involves optimizing the allocation of cloud resources based on usage and cost. By using AWS Cost Explorer, you can identify underutilized resources and make informed decisions about adjusting resource allocation to reduce costs, which is a key aspect of rightsizing.
Source: Adapted from community discussion — Thaluu
A company wants to deploy a non-containerized Java-based web application on AWS. The company wants to use a managed service to quickly deploy the application. The company wants the service to automatically provision capacity, load balance, scale, and monitor application health. Which AWS service will meet these requirements?
Answer: D
D. AWS Elastic Beanstalk AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS. You simply upload your code, and AWS Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, and auto-scaling to application health monitoring. It is ideal for non-containerized Java-based web applications, as it abstracts the underlying infrastructure, allowing developers to focus on writing code rather than managing environments
Source: Adapted from community discussion — Asylgul
Which AWS service or tool gives users the ability to connect with AWS and deploy resources programmatically?
Answer: D
D. AWS SDKs (Software Development Kits) AWS SDKs provide a set of tools for developers to integrate with and manage AWS services programmatically. These SDKs support multiple programming languages, including Java, Python, .NET, Node.js, PHP, Ruby, and Go, among others, enabling developers to use the language they are most comfortable with to interact with AWS services. Through these SDKs, developers can create, configure, and manage AWS resources directly from their applications.
Source: Adapted from community discussion — Asylgul
A company has deployed a web application to Amazon EC2 instances. The EC2 instances have low usage. Which AWS service or feature should the company use to rightsize the EC2 instances?
Answer: D
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
Answer: C
The recommended security best practice for giving an Amazon EC2 instance access to an Amazon S3 bucket is option C: Have the EC2 instance assume a role to obtain the privileges to upload the file. This involves using AWS Identity and Access Management (IAM) roles to grant temporary permissions to the EC2 instance, rather than hard-coding or storing access keys directly in the application or on the instance. This approach enhances security by minimizing the exposure of long-term credentials and following the principle of least privilege. The EC2 instance assumes a role with specific permissions to interact with the S3 bucket, and AWS automatically rotates temporary credentials for the instance. Options A and B involve storing IAM user's secret keys on the EC2 instance, which is not recommended due to security risks. Option D, modifying the S3 bucket policy to allow any service to upload to it at any time, is also not recommended as it may lead to security vulnerabilities and compromises the principle of least privilege.
Source: Adapted from community discussion — TheFivePips
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
Answer: BE
A. How quickly an Amazon EC2 instance can be restarted: Not directly related to elasticity. Elasticity is more about adjusting resources based on demand rather than the speed of restarting instances. B. The ability to rightsize resources as demand shifts: Elasticity involves the ability to dynamically adjust the size of resources (e.g., adding or removing instances) based on changing demand. C. The maximum amount of RAM an Amazon EC2 instance can use: Not directly related to elasticity. Elasticity is more about the ability to scale resources horizontally or vertically, not the specific resource limits. D. The pay-as-you-go billing model: Pay-as-you-go is related to the pricing model rather than elasticity. E. How easily resources can be procured when they are needed: Elasticity involves the ease with which resources can be provisioned or de-provisioned based on changing demand, providing flexibility and scalability.
Source: Adapted from community discussion — TheFivePips
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CLF-C02 practice, question 321. 712 questions available.
Version 1.0.0. How we source questions