AWS Certified Cloud Practitioner (CLF-C02) Practice Exam - 100 Questions Flashcards | Quizlet

Under the AWS Shared Responsibility Model, what is AWS's primary responsibility?

AWS is responsible for security 'of' the cloud, which includes the physical infrastructure, power, cooling, and the hardware that runs AWS services.

Under the AWS Shared Responsibility Model, what is the customer's primary responsibility?

The customer is responsible for security 'in' the cloud, including data encryption, OS patching, and identity and access management.

What is the security principle of 'least privilege' in Identity and Access Management (IAM)?

Granting only the minimum permissions required for a user or service to perform its specific task.

Which AWS feature requires a user to enter a code from a secondary device in addition to their password?

Multi-Factor Authentication (MFA).

How is an AWS Region defined in terms of geography?

A physical location in the world where AWS has multiple clusters of data centers.

What is an Availability Zone (AZ)?

One or more discrete data centers with redundant power, networking, and connectivity within an AWS Region.

Which AWS infrastructure component is used to deliver content to global users with lower latency?

Edge Locations.

Which EC2 pricing model provides the highest discount (up to $90\%$) for workloads that can handle interruptions?

Spot Instances.

Which EC2 pricing model allows customers to pay less by committing to a specific amount of compute power for a $1$-year or $3$-year term?

Reserved Instances (or Savings Plans).

What is the standard durability rating for objects stored in Amazon S3 standard storage?

$99.999999999\%$ (known as $11$ 9's durability).

Which Amazon S3 storage class is intended for long-term data archiving with a retrieval time of several hours?

S3 Glacier Deep Archive.

What is AWS Lambda?

A serverless compute service that lets you run code without provisioning or managing servers, where you pay only for compute time consumed.

What is Amazon Relational Database Service (RDS)?

A managed service that makes it easy to set up, operate, and scale a relational database (SQL) in the cloud.

How is Amazon DynamoDB characterized in terms of database type?

A fully managed NoSQL (non-relational) database service that provides fast, predictable performance with seamless scalability.

What is Amazon Route 53?

A highly available and scalable cloud Domain Name System (DNS) web service.

Which service acts as a Content Delivery Network (CDN) to speed up delivery of static and dynamic web content?

Amazon CloudFront.

What is the purpose of Elastic Load Balancing (ELB)?

It automatically distributes incoming application traffic across multiple targets, such as EC2 instances, in one or more Availability Zones.

Which AWS service provides real-time monitoring of AWS resources and applications?

Amazon CloudWatch.

What is AWS CloudTrail used for?

Tracking user activity and API usage across your AWS infrastructure for auditing and compliance.

Which tool provides best practices, security checks, and cost optimization recommendations for your AWS account?

AWS Trusted Advisor.

What is AWS Shield?

A managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.

Which AWS service provides on-demand access to AWS's security and compliance reports and select online agreements?

AWS Artifact.

What is the benefit of Consolidated Billing in AWS Organizations?

It allows a single payment method for multiple accounts and provides the ability to combine usage for volume discounts.

Which high-level AWS support plan provides a Technical Account Manager (TAM) and response times under $15$ minutes for critical systems?

Enterprise Support.

What are the six pillars of the AWS Well-Architected Framework?

Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.