AWS
AWS Certified Cloud Practitioner (CLF-C02)
Question 66 of 381Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Amazon Elastic Container Service (Amazon ECS) - Fargate launch type
The Fargate launch type for Amazon ECS is correct because it is a serverless compute engine that removes the need to provision and manage underlying servers. For the exam, associate Fargate with serverless containers, whereas the EC2 launch type requires you to manage the infrastructure.
Question 67 of 381The AWS Cloud Adoption Framework (AWS CAF) recommends four iterative and incremental cloud transformation phases. Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud will help accelerate your business outcomes?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Envision
The Envision phase focuses on demonstrating how cloud adoption accelerates business outcomes and ties directly to strategic goals. For the exam, associate Align with addressing capability gaps, Launch with delivering pilot initiatives, and Scale with expanding production workloads.
Question 68 of 381Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. AWS Trusted Advisor
AWS Trusted Advisor evaluates your AWS environment against established best practices for cost optimization, security, and performance. While Amazon Inspector is the stronger distractor, it strictly scans applications for code vulnerabilities rather than broader architectural improvements.
Question 69 of 381A data analytics company stores its data on Amazon Simple Storage Service (Amazon S3) and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for this use case?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Amazon Athena
Amazon Athena is a serverless query service that allows you to analyze data directly in S3 using standard SQL without complex setups. While Amazon Redshift is a strong distractor, it is a full data warehouse requiring data loading rather than direct analysis.
Question 70 of 381Which of the following AWS services allows a database to have flexible schema and supports document data models?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon DynamoDB
Amazon DynamoDB is a fast NoSQL database service that supports flexible schemas alongside key-value and document data models. Relational database options like Amazon Relational Database Service require rigid, predefined table structures that cannot easily adapt.
Question 71 of 381Which of the following statements is INCORRECT about AWS Auto Scaling?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. You can automatically deploy AWS Shield when a DDoS attack is detected
AWS Auto Scaling cannot automatically deploy AWS Shield during an attack because Shield must be configured independently as a dedicated service. Remember that Auto Scaling strictly handles capacity by adjusting instance counts, removing unhealthy resources, and integrating load balancers.
Question 72 of 381Which Amazon Elastic Compute Cloud (Amazon EC2) pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. On-demand Instance
On-Demand Instances offer maximum flexibility without requiring upfront payments or long-term commitments while guaranteeing continuous operation. Spot Instances are the strongest distractor, but they carry a strict risk of interruption, which violates the specific requirement.
Question 73 of 381Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management (AWS IAM) entities?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. IAM User
The correct answer works because access key IDs and secret access keys act as long-term credentials directly tied to an IAM user for programmatic access. Remember that IAM roles use temporary security tokens instead of long-term keys, making them ideal for cross-account access or granting permissions to AWS services.
Question 74 of 381Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Health - Your Account Health Dashboard
Your Account Health Dashboard works because it provides a personalized view of service events directly impacting your specific AWS resources. Remember that the Service Health Dashboard only shows the general global status of AWS services, while CloudWatch monitors your application and resource performance metrics.
Question 75 of 381Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. AWS Marketplace
AWS Marketplace works because it serves as a digital catalog where you can easily find, purchase, and immediately deploy third-party software solutions. The other options fail because they handle infrastructure provisioning, configuration auditing, or operational management rather than software sales and distribution.
Question 76 of 381A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Organizations
AWS Organizations works because it lets you centrally manage multiple accounts, enabling consolidated billing under a single payment method. The other options fail because Cost Explorer and Budgets only analyze or track spending, while Secrets Manager securely stores application credentials.
Question 77 of 381What is the primary benefit of deploying an Amazon RDS Multi-AZ database with one standby?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Amazon RDS Multi-AZ enhances database availability
Multi-AZ deployment works because it automatically provisions a synchronous standby replica in a different availability zone to ensure high availability. Remember that read replicas, not standby instances, are used to improve read performance, and deploying across regions is required to survive regional failures.
Question 78 of 381Which policy describes prohibited uses of the web services offered by Amazon Web Services?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. AWS Acceptable Use Policy
The AWS Acceptable Use Policy describes prohibited uses of AWS web services. Do not confuse this with Trusted Advisor, which provides best practice checks, not acceptable use rules.
Question 79 of 381An e-commerce company wants to store data from a recommendation engine in a database. As a Cloud Practitioner, which AWS service would you recommend to provide this functionality with the LEAST operational overhead for any scale?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon DynamoDB
Amazon DynamoDB is a serverless NoSQL database that scales automatically with minimal operational overhead. Neptune is for graph databases, while RDS requires more management overhead compared to DynamoDB.
Question 80 of 381A company's flagship application runs on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to Amazon EC2 instances without opening new ports or using public IP addresses. Which tool/service will help you achieve this requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Systems Manager Session Manager
AWS Systems Manager Session Manager provides shell access without opening inbound ports or managing SSH keys. EC2 Instance Connect still requires port 22 to be open, making it incorrect here.
Question 81 of 381Which Amazon Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Latency-based routing
Latency-based routing directs users to the AWS endpoint with the lowest network delay. Weighted routing distributes traffic by percentages, and failover routing is for disaster recovery scenarios.
Question 82 of 381A developer has written a simple web application in PHP and wants to just upload the code to AWS Cloud and have AWS handle the deployment automatically, but still wants access to the underlying operating system for further enhancements. As a Cloud Practitioner, which of the following AWS services would you recommend for this use-case?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Elastic Beanstalk
AWS Elastic Beanstalk automatically handles deployment and capacity provisioning while retaining full access to underlying resources. EC2 requires manual deployment, and CloudFormation requires explicit resource templates.
Question 83 of 381According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Database encryption
Under the Shared Responsibility Model, the customer manages data security, including database encryption. AWS handles the underlying infrastructure, server hardware, and operating system patching for managed services.
Question 84 of 381A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon Simple Storage Service (Amazon S3). The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on Amazon S3?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Use Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) to store the thumbnails
Amazon S3 One Zone-Infrequent Access is the most cost-effective tier for rarely accessed, easily regenerable data needing immediate retrieval. Standard-IA is more expensive because it stores data across multiple Availability Zones.
Question 85 of 381Which of the following statements is correct for a Security Group and a Network Access Control List (Network ACL)?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Security Group acts as a firewall at the instance level whereas Network Access Control List (Network ACL) acts as a firewall at the subnet level
Security groups operate at the instance level to control traffic, while network ACLs operate at the subnet level. Remember this exam cue: security groups are stateful, whereas network ACLs are stateless.
Question 86 of 381What are the fundamental drivers of cost with AWS Cloud?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Compute, Storage and Outbound Data Transfer
Compute, storage, and outbound data transfer are correct because these are the three fundamental pricing drivers across AWS services. As a practical exam cue, remember that inbound data transfer is typically free, which immediately eliminates any option pairing compute and storage with inbound traffic.
Question 87 of 381Which of the following statement is correct regarding the AWS pricing policy for data transfer charges into or out of an AWS Region?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Only outbound data transfer is charged
Only outbound data transfer is charged because AWS does not bill for data incoming from the internet into its regions. Outbound data is aggregated and billed at region specific tiered rates, making inbound transfer a consistently free service across standard exam scenarios.
Question 88 of 381Multi-AZ deployment is an example of which of the following?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. High Availability
High availability is correct because deploying resources across multiple Availability Zones ensures your architecture can withstand a single data center failure. Scaling out involves adding more instances to handle increased load, whereas multi AZ focuses strictly on resilience and uptime.
Question 89 of 381Which AWS technology/service helps you to scale your resources to match supply with demand while still keeping your cloud solution cost-effective?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. AWS Auto Scaling
AWS Auto Scaling automatically adjusts compute capacity to match demand, ensuring steady performance at the lowest possible cost. Cost Explorer is only a reporting tool for visualizing past spending, so it lacks the capability to actively scale your resources.
Question 90 of 381A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. An Amazon Virtual Private Cloud (Amazon VPC) spans all of the Availability Zones (AZ) in the Region whereas a subnet spans only one Availability Zone (AZ) in the Region
A virtual private cloud spans all Availability Zones within a specific Region, providing a broad isolated network boundary. In contrast, a subnet must be confined to a single Availability Zone to provide highly available architectural designs.
Question 91 of 381A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Amazon MQ
Amazon MQ is a managed broker service for ActiveMQ and RabbitMQ, designed specifically for easily migrating existing messaging applications to AWS. Use SQS and SNS when building brand new cloud-native applications rather than lifting and shifting legacy code.
Question 92 of 381Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Elasticity
Elasticity refers to the ability to acquire resources as needed and release them when they are no longer required, matching capacity to dynamic demand. Reliability and durability describe system uptime and data protection, not dynamic resource scaling.
Question 93 of 381Which AWS service can be used to store, manage, and deploy Docker container images?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Amazon Elastic Container Registry (Amazon ECR)
Amazon Elastic Container Registry is a fully managed service used to store, manage, and deploy Docker container images securely. Do not confuse this with Amazon ECS, which actually runs and orchestrates the containers rather than storing the images.
Question 94 of 381A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Web Application Firewall (AWS WAF)
The Web Application Firewall protects web applications from common exploits like SQL injection and cross-site scripting by filtering malicious traffic. GuardDuty focuses on broader account threat detection, lacking specific layer seven application filtering capabilities.
Question 95 of 381Which AWS service would you use to send alerts when the costs for your AWS account exceed your budgeted amount?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. AWS Budgets
AWS Budgets allows you to set custom cost or usage budgets and trigger alerts when thresholds are exceeded. As a helpful exam tip, AWS Cost Explorer is used for visualizing historical data rather than triggering proactive billing alerts.
Question 96 of 381The engineering team at an IT company wants to monitor the CPU utilization for its fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances and send an email to the administrator if the utilization exceeds 80%. As a Cloud Practitioner, which AWS services would you recommend to build this solution? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: B. Amazon Simple Notification Service (SNS) · D. Amazon CloudWatch
Amazon CloudWatch monitors metrics like CPU utilization and can trigger alarms, which then use Amazon SNS to send email notifications. SQS is a queue service and CloudTrail tracks API activity, so they do not fit operational metric alerting.
Question 97 of 381An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. AWS Config
AWS Config continuously monitors and records resource configurations, allowing you to track historical changes and map dependencies. CloudTrail records API account activity rather than tracking state changes of the resources themselves.
Question 98 of 381A company wants a fully managed, flexible, and scalable file storage system, with low latency access, for its Windows-based applications. Which AWS service is the right choice for the company?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Amazon FSx for Windows File Server
Amazon FSx for Windows File Server provides fully managed shared storage using the native SMB protocol, designed specifically for Windows environments. Amazon EFS uses NFS and is built primarily for Linux-based workloads.
Question 99 of 381Which AWS Support plan provides access to a designated Technical Account Manager (TAM)?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Enterprise Support
AWS Enterprise Support provides a designated Technical Account Manager to coordinate proactive guidance and access to subject matter experts. For the exam, remember that Enterprise On-Ramp only provides access to a pool of Technical Account Managers, rather than a dedicated one.
Question 100 of 381Which AWS service publishes up-to-the-minute information on the general status and availability of AWS services in all AWS Regions?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. AWS Health Dashboard - service health
The AWS Health Dashboard service health view displays the general status and availability of all AWS services across all Regions. Be sure to distinguish this from your account health, which provides personalized alerts about events impacting your specific resources.
Question 101 of 381Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS CloudHSM
AWS CloudHSM provides dedicated hardware security modules for cryptographic operations, meeting strict compliance controls. Remember that Key Management Service uses shared underlying hardware, so it does not satisfy strict regulatory mandates requiring single-tenant hardware.
Question 102 of 381An e-commerce company wants to assess its applications deployed on Amazon Elastic Compute Cloud (Amazon EC2) instances for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon Inspector
Amazon Inspector automatically assesses deployed applications for vulnerabilities and deviations from established security best practices. Trusted Advisor is the stronger distractor here, but remember it evaluates global infrastructure optimizations rather than scanning application code.
Question 103 of 381An online gaming company wants to block users from certain geographies from accessing its content. Which AWS service can be used to accomplish this task?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. AWS Web Application Firewall (AWS WAF)
AWS Web Application Firewall allows you to create rules that block or allow web requests based on geographic location. AWS Shield is a strong distractor, but it only provides managed protection against distributed denial of service attacks without geo-blocking capabilities.
Question 104 of 381Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two)?
Select 2 answers.
Show answer & explanation
Correct answer: A. AWS Virtual Private Network (VPN) · C. AWS Direct Connect
Both AWS Virtual Private Network and AWS Direct Connect establish secure network connections between your on-premises data centers and the AWS cloud. Be careful choosing an Internet Gateway, as it only enables communication between instances and the public internet.
Question 105 of 381Which of the following options can be used to access and manage all AWS services (Select three)?
Select 3 answers.
Show answer & explanation
Correct answer: A. AWS Management Console · D. AWS Software Development Kit (SDK) · E. AWS Command Line Interface (AWS CLI)
The correct options work because the management console, command line interface, and software development kits are the three primary methods for programmatically or interactively managing AWS services. A helpful exam cue is to distinguish management interfaces from specific infrastructure tools like Systems Manager or Secrets Manager, which manage individual resources.
Question 106 of 381Which of the following is the correct statement regarding the AWS Storage services?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Amazon Simple Storage Service (Amazon S3) is object based storage, Amazon Elastic Block Store (Amazon EBS) is block based storage and Amazon Elastic File System (Amazon EFS) is file based storage
The correct answer works because it accurately aligns the storage types with their defining characteristics across the core storage services. A practical exam cue is remembering that S3 stores objects, EBS attaches as block volumes to EC2 instances, and EFS provides shared file systems.
Question 107 of 381Which of the following statements are correct about the AWS root user account? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: D. It is highly recommended to enable Multi-Factor Authentication (MFA) for root user account · E. Root user access credentials are the email address and password used to create the AWS account
The correct options work because the root user is created using a specific email and password, and securing it with multi-factor authentication is a critical best practice. A key exam cue is that root user permissions cannot be restricted by IAM policies, so the credentials must be locked away securely.
Question 108 of 381A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations. Which AWS technology/service will provide the necessary low-latency access to the end-users?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Local Zones
Local Zones place select AWS services like compute and storage closer to major population centers, delivering the required low latency for local users. However, because Wavelength specifically targets ultra-low latency mobile applications via telecom networks, it is also a defensible choice for local latency requirements.
Question 109 of 381Which AWS service can be used to provision resources to run big data workloads on Hadoop clusters?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon EMR
Amazon EMR works because it is a managed cluster platform specifically designed to process vast amounts of data using big data frameworks like Apache Hadoop. A practical exam cue is to associate EMR with big data, whereas AWS Batch is meant for scheduling standard computing jobs.
Question 110 of 381An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: B. Amazon Eventbridge · E. AWS Lambda
Amazon EventBridge can trigger an AWS Lambda function on a specific schedule for a serverless solution. EC2 is not serverless, and Step Functions orchestrates workflows rather than acting as a standalone scheduler.
Question 111 of 381Which of the following use-cases is NOT supported by Amazon Rekognition?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Quickly resize photos to create thumbnails
Amazon Rekognition cannot resize photos or create thumbnails, as it is strictly for image and video analysis. You would use a compute service like Lambda for image manipulation tasks.
Question 112 of 381Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)
Select 3 answers.
Show answer & explanation
Correct answer: A. AWS Web Application Firewall (AWS WAF) · B. AWS Shield · F. Amazon CloudFront with Amazon Route 53
AWS Shield, AWS WAF, and the combination of Amazon CloudFront with Amazon Route 53 are correct because they provide managed DDoS protection, layer seven filtering, and edge network resilience. Services like Amazon Inspector or Trusted Advisor evaluate vulnerabilities and best practices but do not actively block traffic.
Question 113 of 381A startup is looking for 24x7 phone-based technical support for its AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. AWS Business Support
AWS Business Support is correct because it is the lowest tier offering twenty four seven phone, email, and chat access for production workloads. Developer Support only provides email during business hours, while Enterprise tiers provide the same access but at a higher cost.
Question 114 of 381Which AWS service helps with global application availability and performance using the AWS global network?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. AWS Global Accelerator
AWS Global Accelerator is correct because it leverages the highly available AWS global network to route traffic efficiently to optimal regional endpoints. While CloudFront also uses edge locations, it is primarily a content delivery network caching content rather than optimizing non HTTP traffic paths.
Question 115 of 381Which AWS compute service provides the EASIEST way to access resizable compute capacity in the cloud with support for per-second billing and access to the underlying OS?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon Elastic Compute Cloud (Amazon EC2)
Amazon EC2 is correct because it provides secure, resizable virtual servers with per second billing and full access to the operating system. As an exam cue, remember that serverless options like Lambda abstract the OS entirely, whereas containers require additional management overhead.
Question 116 of 381Which of the following AWS services are always free to use? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: C. AWS Identity and Access Management (AWS IAM) · E. AWS Auto Scaling
AWS Identity and Access Management and AWS Auto Scaling are correct because neither carries an additional service charge beyond the underlying resources they manage. Services like EC2, S3, and DynamoDB incur usage costs, making IAM and Auto Scaling reliable free utilities on the exam.
Question 117 of 381Which of the following foundational capabilities can be found under the Operations Perspective of the AWS Cloud Adoption Framework?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Performance and capacity management
Performance and capacity management is correct because the Operations perspective of the AWS Cloud Adoption Framework focuses on maintaining reliable cloud service delivery. For the exam, align vulnerability management with Security, and remember that Operations handles day to day health monitoring.
Question 118 of 381What are the different gateway types supported by AWS Storage Gateway service?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Tape Gateway, File Gateway and Volume Gateway
AWS Storage Gateway offers three gateway types: Tape Gateway, File Gateway, and Volume Gateway. For the exam, remember that Block Gateway and Object Gateway are fabricated distractors, as the valid service only provides file, volume, and tape storage interfaces.
Question 119 of 381As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Edge Location Management
Under the Shared Responsibility Model, AWS is responsible for the security of the cloud, including managing physical infrastructure like edge locations. Customers remain fully responsible for protecting their data, configuring identity access, and managing encryption.
Question 120 of 381Which of the following AWS services comes under the Software as a Service (SaaS) Cloud Computing Type?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon Rekognition
Amazon Rekognition is classified as Software as a Service because it provides a complete, fully managed product ready for immediate use. EC2 represents Infrastructure as a Service, while Elastic Beanstalk is Platform as a Service, where you simply upload application code.
Question 121 of 381An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Hybrid deployment
A hybrid deployment connects existing on-premises infrastructure to the cloud. For the exam, remember that purely cloud-based is an all-in-cloud deployment, while on-premises virtualization is a private deployment.
Question 122 of 381A fleet of Amazon EC2 instances spread across different Availability Zones (AZ) needs to access, edit and share file-based data stored centrally on a system. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Amazon Elastic File System (Amazon EFS)
Amazon EFS provides scalable, shared file storage that can be mounted across multiple EC2 instances in different Availability Zones. EBS volumes are restricted to a single instance normally, making it a poor choice for concurrent multi-instance file sharing.
Question 123 of 381Which of the following statements are true about AWS Lambda? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: C. AWS Lambda lets you run code without provisioning or managing servers · E. You pay for the compute time you consume for AWS Lambda
AWS Lambda is a serverless compute service that runs code without requiring server management, charging only for actual compute time consumed. You cannot access the underlying operating system or install databases directly on it.
Question 124 of 381Which of the following AWS services are global in scope? (Select two.)
Select 2 answers.
Show answer & explanation
Correct answer: B. AWS Identity and Access Management (AWS IAM) · D. Amazon CloudFront
AWS Identity and Access Management and Amazon CloudFront operate globally rather than within a single region. A practical exam cue is that IAM is managed globally, while Amazon S3 uses a global namespace but stores data regionally.
Question 125 of 381The AWS Well-Architected Framework provides guidance on building cloud-based applications using AWS best practices. Which of the following options are pillars mentioned in the AWS Well-Architected Framework? (Select two.)
Select 2 answers.
Show answer & explanation
Correct answer: A. Cost Optimization · B. Reliability
Cost Optimization and Reliability are both official pillars of the AWS Well-Architected Framework. The other valid pillars are Operational Excellence, Security, Performance Efficiency, and Sustainability, while elasticity and scalability are general cloud characteristics.
Question 126 of 381Which of the following AWS services is essential for implementing security of resources in AWS Cloud?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. AWS Identity and Access Management (IAM)
AWS Identity and Access Management securely controls access to services and resources across your account. While WAF and Shield protect against network attacks, IAM provides the foundational resource-level security by managing permissions.
Question 127 of 381Which of the following are examples of Horizontal Scalability (aka Elasticity)? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: B. Read Replicas in Amazon Relational Database Service (Amazon RDS) · E. Elastic Load Balancing (ELB)
Adding RDS Read Replicas and using Elastic Load Balancing are classic examples of horizontal scaling because they add more instances to distribute traffic. Upgrading instance sizes or adding CPUs are vertical scaling methods instead.
Question 128 of 381AWS Compute Optimizer delivers recommendations for which of the following AWS resources? (Select two)
Select 2 answers.
Show answer & explanation
Correct answer: A. Amazon Elastic Block Store (Amazon EBS), AWS Lambda functions · B. Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon EC2 Auto Scaling groups
AWS Compute Optimizer analyzes historical metrics to recommend optimal configurations for EC2 instances, Auto Scaling groups, EBS volumes, and Lambda functions. For your exam, remember that Compute Optimizer does not cover object or file storage services.
Study on mobile
Get CertPunch for iOS or Android.