AWS Certified Cloud Practitioner (CLF-C01) examtopics 문제 모음 오답노트

examtopics.com 문제를 풀어보고서 틀린문제와 헷갈리는 문제를 정리한 것 입니다.

Free & Accurate Amazon AWS Certified Cloud Practitioner Practice Questions | ExamTopics

Free & Accurate Amazon AWS Certified Cloud Practitioner Practice Questions | ExamTopics

 

Question #18

A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.
Which AWS service or feature will help the company with its migration?

• A. AWS Trusted Advisor
• B. AWS Consulting Partners Most Voted
• C. AWS Artifacts
• D. AWS Managed Services

정답: B

Reference: AWS 파트너 되기 | AWS 파트너 네트워크 (amazon.com)

 

Question #18

Which AWS service or tool should a company use to centrally request and track service limit increases?

• A. AWS Config
• B. Service Quotas Most Voted
• C. AWS Service Catalog
• D. AWS Budgets

정답: B

Question #25

According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?

• A. Manage connections to the database Most Voted
• B. Install Microsoft SQL Server
• C. Design encryption-at-rest strategies Most Voted
• D. Apply minor database patches

정답: C

Reference: 공동 책임 모델 – Amazon Web Services(AWS)

<고객은 데이터 관리(암호화 옵션 포함), 자산 분류, 적절한 허가를 부여하는 IAM 도구 사용에 책임이 있습니다.>

정답이 A아니면 C로 갈리는데 일단은 조금 더 많은 사람들이 C라고 하고 있다. 근데 A가 왜 안되는지는 잘 이해가 안된다.

 

Question #30

How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model?

• A. AWS resources do not incur costs
• B. There are no infrastructure operating costs Most Voted
• C. There are no upfront cost commitments Most Voted
• D. There are no software licensing costs

정답: B

C가 안되는 이유는 AWS 서비스 중에 한번에 요금을 미리 다 결제하는 상품 있기 때문이다. (EC2 예약 인스턴스 선결제)

Question #35

A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.
Which AWS solution should the company use to meet this requirement?

• A. AWS Config
• B. AWS software development kits (SDKs)
• C. AWS Service Catalog
• D. AWS AppSync

정답: C

Reference: AWS Service Catalog의 개요 - AWS Service Catalog (amazon.com)

 

Question #56

A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs.
Which AWS service or feature meets these requirements?

• A. AWS Direct Connect
• B. AWS Transit Gateway
• C. AWS Site-to-Site VPN
• D. VPC endpoints

정답: B

Reference: AWS Transit Gateway - Amazon Web Services

 

Question #59

A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan.
Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?

• A. AWS Abuse team
• B. The designated AWS technical account manager (TAM)
• C. AWS infrastructure event management Most Voted
• D. AWS Professional Services

정답: C

Reference: 인프라 이벤트 관리 | 쇼핑 기간 또는 제품 출시 일정 계획 | AWS 지원 (amazon.com)

AWS Enterprise Support 플랜 | 지침, 기술, 탐색 | AWS Support (amazon.com)

Enterpirse Support plan에 기본적으로 포함되는 서비스 입니다.

 

Question #67

A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software.
Which AWS service should the company use to meet these requirements?

• A. Amazon VPC
• B. Amazon EC2
• C. Amazon GuardDuty
• D. AWS Direct Connect

정답: C

Reference: 지능형 탐지 서비스 - Amazon GuardDuty - Amazon Web Services

 

Question #71

A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.
Which AWS service should the company use to meet these requirements?

• A. AWS IoT Core
• B. Amazon Lightsail
• C. AWS Storage Gateway
• D. AWS Snowball Edge Most Voted

정답: D

 

Question #87

Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?

• A. VPC Flow Logs
• B. Amazon Inspector
• C. VPC endpoint services
• D. NAT gateway

정답: A

Reference: VPC 흐름 로그를 사용하여 IP 트래픽 로깅 - Amazon Virtual Private Cloud

 

Question #108

Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

• A. Amazon GuardDuty
• B. AWS Security Hub
• C. AWS Artifact
• D. AWS Shield

정답: C

Reference: 셀프 서비스 규정 준수 포털 - AWS Artifact - Amazon Web Services

 

Question #124

Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)

• A. Amazon Simple Notification Service (Amazon SNS)
• B. Amazon Simple Queue Service (Amazon SQS)
• C. AWS CodeBuild
• D. Amazon S3 Most Voted
• E. Amazon DynamoDB Most Voted

정답: D,E

Reference: Gateway endpoints - Amazon Virtual Private Cloud

 

Question #127

A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the operating system of the server where the DB instance runs.
What is the company's responsibility in this situation, according to the AWS shared responsibility model?

• A. Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system.
• B. Open a support case and request that AWS patch the DB instance operating system.
• C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for the DB instance.
• D. Establish a regular maintenance window that tells AWS when to patch the DB instance operating system. Most Voted

정답: D

 

Question #130

Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?

• A. Agility
• B. Elasticity
• C. Scalability
• D. High availability

정답: D

Reference: High availability (amazon.com)

agility가 답이 안되는 이유는 agility는 배포 될 때 얼마나 빨리 되는지를 의미하기 때문이다.

 

Question #132

What does the AWS Concierge Support team provide?

• A. A technical expert dedicated to the user
• B. A primary point of contact for AWS Billing and AWS Support Most Voted
• C. A partner to help provide scaling guidance for an event launch
• D. A dedicated AWS staff member who reviews the user's application architecture

정답: B

 

Question #140

Which AWS service monitors AWS accounts for security threats?

• A. Amazon GuardDuty
• B. AWS Secrets Manager
• C. Amazon Cognito
• D. AWS Certificate Manager (ACM)

정답: A

Reference: 지능형 탐지 서비스 - Amazon GuardDuty - Amazon Web Services

 

Question #150

A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.
Which best practice for cost governance does this example show?

• A. Resource controls
• B. Cost allocation
• C. Architecture optimization Most Voted
• D. Tagging enforcement

정답: C

 

Question #165

A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated. The data needs to be available for retrieval within seconds.
Which S3 storage class meets these requirements MOST cost-effectively?

• A. S3 Standard
• B. S3 One Zone-Infrequent Access (S3 One Zone-IA)
• C. S3 Standard-Infrequent Access (S3 Standard-IA) Most Voted
• D. S3 Glacier

정답: C

Reference: 객체 스토리지 클래스 – Amazon S3

왜 B는 아닌지 모르겠다.

 

Question #168

A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.
Which AWS service or program should the company use to determine which AWS services meet the regional requirements?

• A. AWS Audit Manager
• B. AWS Shield
• C. AWS Compliance Program
• D. AWS Artifact Most Voted

정답: D

Reference: 셀프 서비스 규정 준수 포털 - AWS Artifact - Amazon Web Services

 

Question #183

A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user.
What should the company do to meet these data storage requirements with the LEAST amount of operational overhead?

• A. Use Amazon EC2 in multiple Regions to host separate databases
• B. Use Amazon RDS cross-Region replication
• C. Use Amazon DynamoDB global tables
• D. Use AWS Database Migration Service (AWS DMS)

정답: C

Reference: Amazon DynamoDB 글로벌 테이블은 선택된 AWS 리전 간에 Amazon DynamoDB 테이블을 자동으로 복제

 

Question #194

A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a strong IT support team and does not need concierge support.
Which AWS Support plan will meet these requirements at the LOWEST cost?

• A. AWS Basic Support
• B. AWS Developer Support
• C. AWS Business Support Most Voted
• D. AWS Enterprise Support

정답: C

Reference: AWS Support Plans (amazon.com)

 

Question #185

Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?

• A. Patch management controls
• B. Awareness and training controls
• C. Physical and environmental controls
• D. Configuration management controls

정답: C

Reference: 공동 책임 모델 – Amazon Web Services(AWS)

 

Question #195

Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?

• A. Amazon Athena
• B. AWS Glue
• C. Amazon S3
• D. AWS Snowball Edge

정답: B

Reference: AWS Glue | 서버리스 데이터 통합 서비스 | Amazon Web Services

 

Question #220

What is the primary use case for Amazon GuardDuty?

• A. Prevention of DDoS attacks
• B. Protection against SQL injection attacks
• C. Automatic monitoring for threats to AWS workloads
• D. Automatic provisioning of AWS resources

정답: C

Reference: 지능형 탐지 서비스 - Amazon GuardDuty - Amazon Web Services

 

Question #222

회사는 Amazon S3에 저장된 데이터에서 신용 카드 번호와 같은 PII(개인 식별 정보)를 식별해야 합니다.
이 요구 사항을 충족하기 위해 어떤 AWS 서비스를 사용해야 합니까?

• A. Amazon Inspector
• B. AWS Shield
• C. Amazon GuardDuty
• D. Amazon Macie

정답: D

Reference: 민감한 데이터 검색 및 보호 - Amazon Macie - Amazon Web Services

Macie는 기계학습을 이용하여 개인 식별 정보(PII)와 같은 민감한 데이터를 식별하고 사용자에게 알린다.

 

Question #225

Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.)

• A. Amazon ElastiCache
• B. Amazon RDS for Oracle
• C. Amazon Neptune
• D. Amazon DocumentDB (with MongoDB compatibility)
• E. Amazon Redshift

정답: CD

Reference:

https://docs.aws.amazon.com/documentdb/latest/developerguide/replication.html https://docs.aws.amazon.com/neptune/latest/userguide/feature-overview-storage.html

 

Question #233

A company wants its employees to have access to virtual desktop infrastructure to securely access company-provided desktops through the employees' personal devices.
Which AWS service should the company use to meet these requirements?

• A. Amazon AppStream 2.0
• B. AWS AppSync
• C. Amazon FSx for Windows File Server
• D. Amazon WorkSpaces

정답: D

Reference: https://aws.amazon.com/workspaces/

 

Question #239

회사는 페타바이트 규모의 반구조화 및 구조화된 데이터에 대한 비즈니스 인텔리전스 및 운영 분석을 위한 보고서를 생성해야 합니다. 이러한 보고서는 Amazon S3 데이터 레이크에 있는 데이터에 대한 표준 SQL 쿼리에서 생성됩니다.
이 데이터를 분석하는 기능을 제공하는 AWS 서비스는 무엇입니까?

• A. Amazon RDS
• B. Amazon Neptune
• C. Amazon DynamoDB
• D. Amazon Redshift

정답: D

Reference:

데이터 웨어하우스란 무엇입니까? | 주요 개념 | Amazon Web Services

데이터 웨어하우스 | Redshift | Amazon Web Services

 

Question #248

Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.)

• A. Amazon Route 53
• B. Amazon CloudFront
• C. AWS Transfer Family
• D. AWS Site-to-Site VPN
• E. Amazon API Gateway

정답: BE

Refernece: 웹 애플리케이션 방화벽 - AWS WAF - Amazon Web Services

CDN 솔루션의 일부인 Amazon CloudFront, EC2에서 실행되는 웹 서버 또는 오리진 서버의 전방에 배치된 Application Load Balancer, REST API용 Amazon API Gateway, 또는 GraphQL API용 AWS AppSync에 AWS WAF를 배포할 수 있습니다.

 

Question #249

Which controls are shared under the AWS shared responsibility model? (Choose two.)

• A. Awareness and training Most Voted
• B. Patching of Amazon RDS
• C. Configuration management Most Voted
• D. Physical and environmental controls
• E. Service and communications protection or security

정답: AC

Reference: 공동 책임 모델 – Amazon Web Services(AWS)

 

Question #251

Which of the following are AWS compute services? (Choose two.)

• A. Amazon Lightsail
• B. AWS Systems Manager
• C. AWS CloudFormation
• D. AWS Batch
• E. Amazon Inspector

정답: AD

Reference: https://aws.amazon.com/products/compute/

 

Question #271

A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.
Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

• A. EC2 hypervisor
• B. Security patching of the guest operating system
• C. Network connectivity of the host server
• D. Uptime service level agreement (SLA) for the EC2 instances

정답: B

Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

 

Question #283

Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

• A. Amazon CloudFront
• B. Amazon GuardDuty
• C. Amazon Route 53
• D. AWS Trusted Advisor

정답: C

Reference: Amazon Route 53 - Amazon Web Services

Amazon Route 53 트래픽 흐름 및 라우팅 제어와 같은 기능을 사용하면 간편하게 구성된 장애 조치로 안정성을 향상할 수 있습니다. 이를 통해 기본 애플리케이션 엔드포인트를 사용할 수 없게 되는 경우 사용자를 대체 위치로 재라우팅할 수 있습니다

 

Question #291

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

• A. Scale the number of EC2 instances in or out automatically, based on demand.
• B. Use serverless EC2 instances.
• C. Scale the size of EC2 instances up or down automatically, based on demand.
• D. Transfer unused CPU resources between EC2 instances.

정답: A

C는 vertical scaling이. Auto Scaling은 horizontal scaling