Latest AWS Practice Test 2023: How AWS Practice Exams Can Help You Prepare !!

Are you looking to become an AWS certified professional? Our practice exams are the perfect way to prepare for your certification exam. With industry best questions and detailed explanations, you’ll have the confidence to pass with flying colors. Our AWS practice exams are designed to optimize your studying time and ensure you’re ready to tackle the real exam. Start your journey towards AWS certification success and boost your career today with ITExamTest.

Join Us on Whatsapp for AWS Exam Code Updates

Why taking AWS practice exams is important

Familiarity with exam format: AWS practice exams are designed to mimic the format of the actual certification exam. This helps you become familiar with the structure of the exam, the types of questions asked, and the time constraints you’ll be under.
Identify knowledge gaps: Practice exams help you identify areas where you may be weak or need more practice. By taking these exams, you can focus your studies on those specific areas and improve your knowledge and understanding.
Build confidence: By practicing with mock exams, you can build confidence in your ability to answer questions correctly and pass the actual certification exam.
ncrease chances of passing: The more you practice, the more prepared you will be for the actual certification exam. This can increase your chances of passing the exam and obtaining your AWS certification.

Best of luck !! Your Time Start's Now 👍

Time Over Now 👍

AWS Certified Database – Specialty DBS-C01 Updated May 2023

The DBS-C01 practice exam consists of 270 questions and you need to attend random 60 Question and you will have 120 minutes to complete the exam. In order to pass the exam, you must achieve a score of at least 70%.

Once you have successfully passed the DBS-C01 practice exam with a score of at least 70%, you will receive a certificate via email.

1 / 60

A retail company with its main office in New York and another office in Tokyo plans to build a database
solution on AWS. The company’s main workload consists of a mission-critical application that updates its
application data in a data store. The team at the Tokyo office is building dashboards with complex
analytical queries using the application data. The dashboards will be used to make buying decisions, so they need to have access to the application
data in less than 1 second.
Which solution meets these requirements?

Use an Amazon RDS DB instance deployed in the us-east-1 Region with a read replica instance in the ap- northeast-1 Region. Create an Amazon ElastiCache cluster in the ap-northeast-1 Region to cache application data from the replica to generate the dashboards.

Use an Amazon DynamoDB global table in the us-east-1 Region with replication into the ap-northeast- 1 Region. Use Amazon QuickSight for displaying dashboard results.

Use an Amazon RDS for MySQL DB instance deployed in the us-east-1 Region with a read replica instance in the ap-northeast-1 Region. Have the dashboard application read from the read replica.

Use an Amazon Aurora global database. Deploy the writer instance in the us-east-1 Region and the replica in the ap-northeast-1 Region. Have the dashboard application read from the replica ap-northeast- 1 Region.

Explanation:

https://aws.amazon.com/blogs/database/aurora-postgresql-disaster-recovery-solutions-using-amazon-
aurora-global-database/

2 / 60

A company has branch offices in the United States and Singapore. The company has a three-tier web
application that uses a shared database. The database runs on an Amazon RDS for MySQL DB instance

that is hosted in the us-west-2 Region. The application has a distributed front end that is deployed in us-
west-2 and in the ap-southeast-1 Region. The company uses this front end as a dashboard that provides

statistics to sales managers in each branch office.
The dashboard loads more slowly in the Singapore branch office than in the United States branch office.
The company needs a solution so that the dashboard loads consistently for users in each location.
Which solution will meet these requirements in the MOST operationally efficient way?

Take a snapshot of the DB instance in us-west-2. Create a new DB instance in ap-southeast-2 from the snapshot. Reconfigure the ap-southeast-1 front-end dashboard to access the new DB instance.

Create an RDS read replica in ap-southeast-1 from the primary DB instance in us-west-2. Reconfigure the ap-southeast-1 front-end dashboard to access the read replica.

Create a new DB instance in ap-southeast-1. Use AWS Database Migration Service (AWS DMS) and change data capture (CDC) to update the new DB instance in ap-southeast-1. Reconfigure the ap- southeast-1 front-end dashboard to access the new DB instance.

Create an RDS read replica in us-west-2, where the primary DB instance resides. Create a read replicain ap-southeast-1 from the read replica in us-west-2. Reconfigure the ap-southeast-1 front-end dashboard to access the read replica in ap-southeast-1.

3 / 60

A Database Specialist is creating a new Amazon Neptune DB cluster, and is attempting to load fata from
Amazon S3 into the Neptune DB cluster using the Neptune bulk loader API. The Database Specialist
receives the following error:
“Unable to connect to s3 endpoint. Provided source = s3://mybucket/graphdata/ and region = us-east-1.
Please verify your S3 configuration.”
Which combination of actions should the Database Specialist take to troubleshoot the problem? (Choose
two.)

Check that Amazon S3 has an IAM role granting read access to Neptune

Check that an Amazon S3 VPC endpoint exists

Check that a Neptune VPC endpoint exists

Check that Amazon EC2 has an IAM role granting read access to Amazon S3

Check that Neptune has an IAM role granting read access to Amazon S3

Explanation:

Reference: https://aws.amazon.com/premiumsupport/knowledge-center/s3-could-not-connect-
endpoint-url/

4 / 60

A business just transitioned from an on-premises Oracle database to Amazon Aurora PostgreSQL.
Following the move, the organization observed that every day around 3:00 PM, the application's
response time is substantially slower. The firm has determined that the problem is with the database,
not the application.
Which set of procedures should the Database Specialist do to locate the erroneous PostgreSQL query
most efficiently?

Create an Amazon CloudWatch dashboard to show the number of connections, CPU usage, and disk space consumption. Watch these dashboards during the next slow period.

Launch an Amazon EC2 instance, and install and configure an open-source PostgreSQL monitoring tool that will run reports based on the output error logs.

Modify the logging database parameter to log all the queries related to locking in the database and then check the logs after the next slow period for this information.

Enable Amazon RDS Performance Insights on the PostgreSQL database. Use the metrics to identify any queries that are related to spikes in the graph during the next slow period.

Explanation:

https://aws.amazon.com/blogs/database/optimizing-and-tuning-queries-in-amazon-rds-postgresql-
based-on-native-and-external-tools/

"AWS recently released a feature called Amazon RDS Performance Insights, which provides an easy-to-
understand dashboard for detecting performance problems in terms of load." "AWS recently released a

feature called Amazon RDS Performance Insights, which provides an easy-to-understand dashboard for
detecting performance problems in terms of load."

5 / 60

A company is planning to use Amazon RDS for SQL Server for one of its critical applications. The
company's security team requires that the users of the RDS for
SQL Server DB instance are authenticated with on-premises Microsoft Active Directory credentials.
Which combination of steps should a database specialist take to meet this requirement? (Choose three.)

Extend the on-premises Active Directory to AWS by using AD Connector.

Create an IAM user that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.

Create a directory by using AWS Directory Service for Microsoft Active Directory.

Create an Active Directory domain controller on Amazon EC2.

Create an IAM role that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.

Create a one-way forest trust from the AWS Directory Service for Microsoft Active Directory directory to the on-premises Active Directory.

6 / 60

A company is running an Amazon RDS for MySQL Multi-AZ DB instance for a business-critical workload.
RDS encryption for the DB instance is disabled. A recent security audit concluded that all business-critical
applications must encrypt data at rest. The company has asked its database specialist to formulate a plan
to accomplish this for the DB instance.
Which process should the database specialist recommend?

Create an encrypted snapshot of the unencrypted DB instance. Copy the encrypted snapshot to Amazon S3. Restore the DB instance from the encrypted snapshot using Amazon S3.

Create a new RDS for MySQL DB instance with encryption enabled. Restore the unencrypted snapshot to this DB instance.

Create a snapshot of the unencrypted DB instance. Create an encrypted copy of the snapshot. Restore the DB instance from the encrypted snapshot.

Temporarily shut down the unencrypted DB instance. Enable AWS KMS encryption in the AWS Management Console using an AWS managed CMK. Restart the DB instance in an encrypted state.

Explanation:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html#Overview.Encr
yption.Limitations

7 / 60

An online retail company is planning a multi-day flash sale that must support processing of up to 5,000
orders per second. The number of orders and exact schedule for the sale will vary each day. During the
sale, approximately 10,000 concurrent users will look at the deals before buying items. Outside of the
sale, the traffic volume is very low. The acceptable performance for read/write queries should be under 25 ms. Order items are about 2 KB in size and have a unique identifier. The company requires the most
cost-effective solution that will automatically scale and is highly available.
Which solution meets these requirements?

Amazon DynamoDB with on-demand capacity mode

Amazon Aurora with one writer node and an Aurora Replica with the parallel query feature enabled

Amazon DynamoDB with provisioned capacity mode with 5,000 write capacity units (WCUs) and 10,000 read capacity units (RCUs)

Amazon Aurora with one writer node and two cross-Region Aurora Replicas

Explanation:
The number of orders and exact schedule for the sale will vary each day. During the sale, approximately
10,000 concurrent users will look at the deals before buying items. Outside of the sale, the traffic volume
is very low ==> Setting provisioning DynamoDB fix read 5000/write 10000 with will waste the resource
when the traffic is low. It is not cost-effective.

8 / 60

A large financial services company requires that all data be encrypted in transit. A Developer is
attempting to connect to an Amazon RDS DB instance using the company VPC for the first time with
credentials provided by a Database Specialist. Other members of the Development team can connect,
but this user is consistently receiving an error indicating a communications link failure. The Developer
asked the Database Specialist to reset the password a number of times, but the error persists.
Which step should be taken to troubleshoot this issue?

Ensure that the database option group for the RDS DB instance allows ingress from the Developer machine’s IP address

Ensure that the RDS DB instance’s subnet group includes a public subnet to allow the Developer to connect

Ensure that the RDS DB instance has not reached its maximum connections limit

Ensure that the connection is using SSL and is addressing the port where the RDS DB instance is listening for encrypted connections

Explanation:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/SQLServer.Concepts.General.SSL.Using.ht
ml

9 / 60

A company has an AWS CloudFormation stack that defines an Amazon RDS DB instance. The company
accidentally deletes the stack and loses recent data from the DB instance. A database specialist must
change the CloudFormation template for the RDS resource to reduce the chance of accidental data loss
from the DB instance in the future.
Which combination of actions should the database specialist take to meet this requirement? (Choose
three.)

Set the DeletionProtection property to True.

Set the MultiAZ property to True.

Set the TerminationProtection property to True.

Set the DeleteAutomatedBackups property to False.

Set the DeletionPolicy attribute to No.

Set the DeletionPolicy attribute to Retain.

10 / 60

A company has migrated a single MySQL database to Amazon Auror
a. The production data is hosted in a DB cluster in VPC_PROD, and 12 testing environments are hosted in
VPC_TEST using the same AWS account. Testing results in minimal changes to the test data. The
Development team wants each environment refreshed nightly so each test database contains fresh
production data every day.
Which migration approach will be the fastest and most cost-effective to implement?

Run the master in Amazon Aurora MySQL. Create 12 clones in VPC_TEST, and script the clones to be deleted and re-created nightly.

Run the master in Amazon Aurora MySQL. Take a nightly snapshot, and restore it into 12 databases in VPC_TEST using Aurora Serverless.

Run the master in Amazon Aurora MySQL. Create 12 Aurora Replicas in VPC_TEST, and script the replicas to be deleted and re-created nightly.

Run the master in Amazon Aurora MySQL using Aurora Serverless. Create 12 clones in VPC_TEST, and script the clones to be deleted and re-created nightly.

11 / 60

A large IT hardware manufacturing company wants to deploy a MySQL database solution in the AWS
Cloud. The solution should quickly create copies of the company's production databases for test
purposes. The solution must deploy the test databases in minutes, and the test data should match the
latest production data as closely as possible. Developers must also be able to make changes in the test
database and delete the instances afterward.
Which solution meets these requirements?

Leverage Amazon RDS for MySQL with write-enabled replicas running on Amazon EC2. Create the test copies using a mysqidump backup from the RDS for MySQL DB instances and importing them into the new EC2 instances.

Leverage Amazon Aurora MySQL. Use database cloning to create multiple test copies of the production DB clusters.

Leverage Amazon Aurora MySQL. Restore previous production DB instance snapshots into new test copies of Aurora MySQL DB clusters to allow them to make changes.

Leverage Amazon RDS for MySQL. Use database cloning to create multiple developer copies of the production DB instance.

12 / 60

A company has a production environment running on Amazon RDS for SQL Server with an in-house web
application as the front end. During the last application maintenance window, new functionality was
added to the web application to enhance the reporting capabilities for management. Since the update,
the application is slow to respond to some reporting queries.
How should the company identify the source of the problem?

Install and configure Amazon CloudWatch Application Insights for Microsoft .NET and Microsoft SQL Server. Use a CloudWatch dashboard to identify the root cause.

Enable RDS Performance Insights and determine which query is creating the problem. Request changes to the query to address the problem.

Use AWS X-Ray deployed with Amazon RDS to track query system traces.

Create a support request and work with AWS Support to identify the source of the issue.

Amazon RDS Performance Insights is a database performance tuning and monitoring feature that helps
you quickly assess the load on your database, and determine when and where to take action.
Performance Insights allows non-experts to detect performance problems with an easy-to-understand
dashboard that visualizes database load. https://aws.amazon.com/rds/performance-insights/

13 / 60

A bike rental company operates an application to track its bikes. The application receives location and
condition data from bike sensors. The application also receives rental transaction data from the
associated mobile app.
The application uses Amazon DynamoDB as its database layer. The company has configured DynamoDB
with provisioned capacity set to 20% above the expected peak load of the application. On an average
day, DynamoDB used 22 billion read capacity units (RCUs) and 60 billion write capacity units (WCUs). The
application is running well. Usage changes smoothly over the course of the day and is generally shaped
like a bell curve. The timing and magnitude of peaks vary based on the weather and season, but the
general shape is consistent.
Which solution will provide the MOST cost optimization of the DynamoDB database layer?

Change the DynamoDB tables to use on-demand capacity.

Use AWS Auto Scaling and configure time-based scaling.

Enable DynamoDB capacity-based auto scaling.

Enable DynamoDB Accelerator (DAX).

Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/AutoScaling.html

14 / 60

A company has an application that uses an Amazon DynamoDB table as its data store. During normal
business days, the throughput requirements from the application are uniform and consist of 5 standard
write calls per second to the DynamoDB table. Each write call has 2 KB of data.
For 1 hour each day, the company runs an additional automated job on the DynamoDB table that makes
20 write requests per second. No other application writes to the DynamoDB table. The DynamoDB table
does not have to meet any additional capacity requirements.
How should a database specialist configure the DynamoDB table's capacity to meet these requirements
MOST cost-effectively?

Use DynamoDB provisioned capacity with 5 WCUs and auto scaling.

Use DynamoDB provisioned capacity with 5 WCUs and a write-through cache that DynamoDB Accelerator (DAX) provides.

Use DynamoDB provisioned capacity with 10 WCUs and auto scaling.

Use DynamoDB provisioned capacity with 10 WCUs and no auto scaling.

Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/HowItWorks.ReadWriteCapaci
tyMode.html

15 / 60

A company is using an Amazon Aurora PostgreSQL DB cluster with an xlarge primary instance master and
two large Aurora Replicas for high availability and read-only workload scaling. A failover event occurs
and application performance is poor for several minutes. During this time, application servers in all
Availability Zones are healthy and responding normally.
What should the company do to eliminate this application performance issue?

Configure both of the Aurora Replicas to the same instance class as the primary DB instance. Enable cache coherence on the DB cluster, set the primary DB instance failover priority to tier-0, and assign a failover priority of tier-1 to the replicas.

Deploy an AWS Lambda function that calls the DescribeDBInstances action to establish which instance has failed, and then use the PromoteReadReplica operation to promote one Aurora Replica to be the primary DB instance. Configure an Amazon RDS event subscription to send a notification to an Amazon SNS topic to which the Lambda function is subscribed.

Configure one Aurora Replica to have the same instance class as the primary DB instance. Implement Aurora PostgreSQL DB cluster cache management. Set the failover priority to tier-0 for the primary DB instance and one replica with the same instance class. Set the failover priority to tier-1 for the other replicas.

Configure both Aurora Replicas to have the same instance class as the primary DB instance. Implement Aurora PostgreSQL DB cluster cache management. Set the failover priority to tier-0 for the primary DB instance and to tier-1 for the replicas.

Explanation:

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.cluster-cache-
mgmt.html

https://aws.amazon.com/blogs/database/introduction-to-aurora-postgresql-cluster-cache-
management/

"You can customize the order in which your Aurora Replicas are promoted to the primary instance after a
failure by assigning each replica a priority. Priorities range from 0 for the first priority to 15 for the last
priority. If the primary instance fails, Amazon RDS promotes the Aurora Replica with the better priority to
the new primary instance. You can modify the priority of an Aurora Replica at any time. Modifying the
priority doesn't trigger a failover. More than one Aurora Replica can share the same priority, resulting in
promotion tiers. If two or more Aurora Replicas share the same priority, then Amazon RDS promotes the
replica that is largest in size. If two or more Aurora Replicas share the same priority and size, then
Amazon RDS promotes an arbitrary replica in the same promotion tier. "
Amazon Aurora with PostgreSQL compatibility now supports cluster cache management, providing a
faster path to full performance if there's a failover. With cluster cache management, you designate a
specific reader DB instance in your Aurora PostgreSQL cluster as the failover target. Cluster cache

management keeps the data in the designated reader's cache synchronized with the data in the read-
write instance's cache. If a failover occurs, the designated reader is promoted to be the new read-write

instance, and workloads benefit immediately from the data in its cache.

16 / 60

A company is releasing a new mobile game featuring a team play mode. As a group of mobile device
users play together, an item containing their statuses is updated in an Amazon DynamoDB table.
Periodically, the other users’ devices read the latest statuses of their teammates from the table using the
BatchGetltemn operation.
Prior to launch, some testers submitted bug reports claiming that the status data they were seeing in the
game was not up-to-date. The developers are unable to replicate this issue and have asked a database
specialist for a recommendation.
Which recommendation would resolve this issue?

Ensure the DynamoDB table is configured to be always consistent.

Ensure the BatchGetltem operation is called with the ConsistentRead parameter set to false.

Enable a stream on the DynamoDB table and subscribe each device to the stream to ensure all devices receive up-to-date status information.

Ensure the BatchGetltem operation is called with the ConsistentRead parameter set to true.

Explanation:
https://docs.aws.amazon.com/ja_jp/amazondynamodb/latest/developerguide/API_BatchGetItem_v201
11205.html
By default, BatchGetItem performs eventually consistent reads on every table in the request. If you want
strongly consistent reads instead, you can set ConsistentRead to true for any or all tables.

17 / 60

A significant automotive manufacturer is switching a mission-critical finance application's database to
Amazon DynamoDB. According to the company's risk and compliance policy, any update to the database
must be documented as a log entry for auditing purposes. Each minute, the system anticipates about
500,000 log entries. Log entries should be kept in Apache Parquet files in batches of at least 100,000
records per file.
How could a database professional approach these needs while using DynamoDB?

Enable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon S3 object.

Create a backup plan in AWS Backup to back up the DynamoDB table once a day. Create an AWS Lambda function that restores the backup in another table and compares both tables for changes. Generate the log entries and write them to an Amazon S3 object.

Enable AWS CloudTrail logs on the table. Create an AWS Lambda function that reads the log files once an hour and filters DynamoDB API actions. Write the filtered log files to Amazon S3.

Enable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon Kinesis Data Firehose delivery stream with buffering and Amazon S3 as the destination.

18 / 60

A Database Specialist is performing a proof of concept with Amazon Aurora using a small instance to
confirm a simple database behavior. When loading a large dataset and creating the index, the Database
Specialist encounters the following error message from Aurora:
ERROR: cloud not write block 7507718 of temporary file: No space left on device
What is the cause of this error and what should the Database Specialist do to resolve this issue?

The scaling of Aurora storage cannot catch up with the data loading. The Database Specialist needs to modify the workload to load the data slowly.

The scaling of Aurora storage cannot catch up with the data loading. The Database Specialist needs to enable Aurora storage scaling.

The local storage used to store temporary tables is full. The Database Specialist needs to scale up the instance.

The local storage used to store temporary tables is full. The Database Specialist needs to enable local storage scaling.

Explanation:

Reference: https://serverfault.com/QUESTION NO:s/109828/how-can-i-tune-postgres-to-avoid-this-
error

19 / 60

On a single Amazon RDS DB instance, a business hosts a MySQL database for its ecommerce application.
Automatically saving application purchases to the database results in high-volume writes. Employees
routinely create purchase reports for the company. The organization wants to boost database performance and minimize downtime associated with upgrade patching.
Which technique will satisfy these criteria with the LEAST amount of operational overhead?

Enable a Multi-AZ deployment of the RDS for MySQL DB instance, and enable Memcached in the MySQL option group.

Enable a Multi-AZ deployment of the RDS for MySQL DB instance, and set up replication to a MySQL DB instance running on Amazon EC2.

Enable a Multi-AZ deployment of the RDS for MySQL DB instance, and add a read replica.

Add a read replica and promote it to an Amazon Aurora MySQL DB cluster master. Then enable Amazon Aurora Serverless.

20 / 60

A user has a non-relational key-value database. The user is looking for a fully managed AWS service that
will offload the administrative burdens of operating and scaling distributed databases. The solution must
be cost- effective and able to handle unpredictable application traffic.
What should a Database Specialist recommend for this user?

Create an Amazon DynamoDB table with provisioned capacity mode

Create an Amazon DocumentDB cluster

Create an Amazon DynamoDB table with on-demand capacity mode

Create an Amazon Aurora Serverless DB cluster

Reference: https://aws.amazon.com/dynamodb/
Key-value database -> DynamoDB Capable of dealing with unexpected application traffic -> on-demand
capacity mode
A key-value database is a type of nonrelational database that uses a simple key-value method to store
data. A key-value database stores data as a collection of key-value pairs in which a key serves as a unique
identifier. On-demand mode is a good option to create new tables with unknown workloads.
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/HowItWorks.ReadWriteCapaci
tyMode.html#HowItWorks.OnDemand

21 / 60

A company needs a data warehouse solution that keeps data in a consistent, highly structured format.
The company requires fast responses for end-user queries when looking at data from the current year,
and users must have access to the full 15-year dataset, when needed. This solution also needs to handle
a fluctuating number incoming queries. Storage costs for the 100 TB of data must be kept low.
Which solution meets these requirements?

Leverage an Amazon Redshift data warehouse solution using a dense storage instance type while keeping all the data on local Amazon Redshift storage. Provision enough instances to support high demand.

Leverage an Amazon Redshift data warehouse solution using a dense storage instance to store the most recent data. Keep historical data on Amazon S3 and access it using the Amazon Redshift Spectrum layer. Provision enough instances to support high demand.

Explanation:
https://docs.aws.amazon.com/redshift/latest/dg/concurrency-scaling.html
"With the Concurrency Scaling feature, you can support virtually unlimited concurrent users and
concurrent queries, with consistently fast query performance. When concurrency scaling is enabled,
Amazon Redshift automatically adds additional cluster capacity when you need it to process an increase
in concurrent read queries. Write operations continue as normal on your main cluster. Users always see
the most current data, whether the queries run on the main cluster or on a concurrency scaling cluster.
You're charged for concurrency scaling clusters only for the time they're in use. For more information
about pricing, see Amazon Redshift pricing. You manage which queries are sent to the concurrency
scaling cluster by configuring WLM queues. When you enable concurrency scaling for a queue, eligible
queries are sent to the concurrency scaling cluster instead of waiting in line."

22 / 60

A company is due for renewing its database license. The company wants to migrate its 80 TB
transactional database system from on-premises to the AWS Cloud. The migration should incur the least
possible downtime on the downstream database applications. The company’s network infrastructure has
limited network bandwidth that is shared with other applications.
Which solution should a database specialist use for a timely migration?

Perform a full backup of the source database to AWS Snowball Edge appliances and ship them to be loaded to Amazon S3. Use AWS DMS to migrate change data capture (CDC) data from the source database to Amazon S3. Use a second AWS DMS task to migrate all the S3 data to the target database.

Perform a full backup of the source database to AWS Snowball Edge appliances and ship them to be loaded to Amazon S3. Periodically perform incremental backups of the source database to be shipped in another Snowball Edge appliance to handle syncing change data capture (CDC) data from the source to the target database.

Use AWS DMS to migrate the full load of the source database over a VPN tunnel using the internet for its primary connection. Allow AWS DMS to handle syncing change data capture (CDC) data from the source to the target database.

Use the AWS Schema Conversion Tool (AWS SCT) to migrate the full load of the source database over a VPN tunnel using the internet for its primary connection. Allow AWS SCT to handle syncing change data capture (CDC) data from the source to the target database.

Explanation:
https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.S3.html Using Amazon S3 as a target
for AWS Database Migration Service

23 / 60

A bank intends to utilize Amazon RDS to host a MySQL database instance. The database should be able to
handle high-volume read requests with extremely few repeated queries.
Which solution satisfies these criteria?

Create an Amazon ElastiCache cluster. Use a write-through strategy to populate the cache.

Create an Amazon ElastiCache cluster. Use a lazy loading strategy to populate the cache.

Change the DB instance to Multi-AZ with a standby instance in another AWS Region.

Create a read replica of the DB instance. Use the read replica to distribute the read traffic.

24 / 60

A company uses an Amazon RDS for PostgreSQL DB instance for its customer relationship management
(CRM) system. New compliance requirements specify that the database must be encrypted at rest.
Which action will meet these requirements?

Create an encrypted copy of manual snapshot of the DB instance. Restore a new DB instance from the encrypted snapshot.

Modify the DB instance and enable encryption.

Restore a DB instance from the most recent automated snapshot and enable encryption.

Create an encrypted read replica of the DB instance. Promote the read replica to a standalone instance.

Explanation:

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon-rds-
for-postgresql-db-instance.html

You can enable encryption for an Amazon RDS DB instance when you create it, but not after it's created.
However, you can add encryption to an unencrypted DB instance by creating a snapshot of your DB
instance, and then creating an encrypted copy of that snapshot. You can then restore a DB instance from
the encrypted snapshot to get an encrypted copy of your original DB instance. The pattern uses AWS
Database Migration Service (AWS DMS) to migrate data and AWS Key Management Service (AWS KMS)
for encryption.

25 / 60

A global digital advertising company captures browsing metadata to contextually display relevant
images, pages, and links to targeted users. A single page load can generate multiple events that need to
be stored individually. The maximum size of an event is 200 KB and the average size is 10 KB. Each page
load must query the user’s browsing history to provide targeting recommendations. The advertising
company expects over 1 billion page visits per day from users in the United States, Europe, Hong Kong,
and Indi
a. The structure of the metadata varies depending on the event. Additionally, the browsing metadata
must be written and read with very low latency to ensure a good viewing experience for the users.
Which database solution meets these requirements?

Amazon DocumentDB

Amazon RDS Multi-AZ deployment

Amazon DynamoDB global table

Amazon Aurora Global Database

Explanation:
Reference: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/GlobalTables.html

26 / 60

A company is going to use an Amazon Aurora PostgreSQL DB cluster for an application backend. The DB
cluster contains some tables with sensitive dat
a. A Database Specialist needs to control the access privileges at the table level.
How can the Database Specialist meet these requirements?

Use AWS IAM database authentication and restrict access to the tables using an IAM policy.

Configure the rules in a NACL to restrict outbound traffic from the Aurora DB cluster.

Execute GRANT and REVOKE commands that restrict access to the tables containing sensitive data.

Define access privileges to the tables containing sensitive data in the pg_hba.conf file.

Explanation:
Reference: https://aws.amazon.com/blogs/database/managing-postgresql-users-and-roles/

27 / 60

A Database Specialist has migrated an on-premises Oracle database to Amazon Aurora PostgreSQL. The
schema and the data have been migrated successfully. The on-premises database server was also being
used to run database maintenance cron jobs written in Python to perform tasks including data purging
and generating data exports. The logs for these jobs show that, most of the time, the jobs completed
within 5 minutes, but a few jobs took up to 10 minutes to complete. These maintenance jobs need to be
set up for Aurora PostgreSQL.
How can the Database Specialist schedule these jobs so the setup requires minimal maintenance and
provides high availability?

Create cron jobs on an Amazon EC2 instance to run the maintenance jobs following the required schedule.

Connect to the Aurora host and create cron jobs to run the maintenance jobs following the required schedule.

Create AWS Lambda functions to run the maintenance jobs and schedule them with Amazon CloudWatch Events.

Create the maintenance job using the Amazon CloudWatch job scheduling plugin.

Explanation:

https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/Create-CloudWatch-Events-
Scheduled-Rule.html

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/schedule-jobs-for-amazon-rds-
and-aurora-postgresql-using-lambda-and-secrets-manager.html

a job for data extraction or a job for data purging can easily be scheduled using cron. For these jobs,
database credentials are typically either hard-coded or stored in a properties file. However, when you
migrate to Amazon Relational Database Service (Amazon RDS) or Amazon Aurora PostgreSQL, you lose
the ability to log in to the host instance to schedule cron jobs. This pattern describes how to use AWS
Lambda and AWS Secrets Manager to schedule jobs for Amazon RDS and Aurora PostgreSQL databases
after migration.
https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/RunLambdaSchedule.html

28 / 60

A company hosts a 2 TB Oracle database in its on-premises data center. A database specialist is migrating
the database from on premises to an Amazon Aurora
PostgreSQL database on AWS.
The database specialist identifies a problem that relates to compatibility Oracle stores metadata in its
data dictionary in uppercase, but PostgreSQL stores the metadata in lowercase. The database specialist
must resolve this problem to complete the migration.

What is the MOST operationally efficient solution that meets these requirements?

Override the default uppercase format of Oracle schema by encasing object names in quotation marks during creation.

Use AWS Database Migration Service (AWS DMS) mapping rules with rule-action as convert- lowercase.

Use the AWS Schema Conversion Tool conversion agent to convert the metadata from uppercase to lowercase.

Use an AWS Glue job that is attached to an AWS Database Migration Service (AWS DMS) replication task to convert the metadata from uppercase to lowercase.

Explanation:
https://aws.amazon.com/premiumsupport/knowledge-center/dms-mapping-oracle-postgresql/

29 / 60

An Amazon RDS EBS-optimized instance with Provisioned IOPS (PIOPS) storage is using less than half of

its allocated IOPS over the course of several hours under constant load. The RDS instance exhibits multi-
second read and write latency, and uses all of its maximum bandwidth for read throughput, yet the

instance uses less than half of its CPU and RAM resources.

What should a Database Specialist do in this situation to increase performance and return latency to sub-
second levels?

Increase the size of the DB instance storage

Change the underlying EBS storage type to General Purpose SSD (gp2)

Disable EBS optimization on the DB instance

Change the DB instance to an instance class with a higher maximum bandwidth

Explanation:
https://docs.amazonaws.cn/en_us/AmazonRDS/latest/UserGuide/CHAP_BestPractices.html

30 / 60

Amazon DynamoDB global tables are being used by a business to power an online gaming game. The
game is played by gamers from all around the globe. As the game became popularity, the amount of
queries to DynamoDB substantially rose. Recently, gamers have complained about the game's condition
being inconsistent between nations. A database professional notices that the ReplicationLatency metric
for many replica tables is set to an abnormally high value.
Which strategy will resolve the issue?

Configure all replica tables to use DynamoDB auto scaling.

Configure a DynamoDB Accelerator (DAX) cluster on each of the replicas.

Configure the primary table to use DynamoDB auto scaling and the replica tables to use manually provisioned capacity.

Configure the table-level write throughput limit service quota to a higher value.

Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/V2globaltables_reqs_bestprac
tices.html

31 / 60

A gaming company uses Amazon Aurora Serverless for one of its internal applications. The company's
developers use Amazon RDS Data API to work with the
Aurora Serverless DB cluster. After a recent security review, the company is mandating security
enhancements. A database specialist must ensure that access to
RDS Data API is private and never passes through the public internet.
What should the database specialist do to meet this requirement?

Modify the Aurora Serverless cluster by selecting a VPC with private subnets.

Modify the Aurora Serverless cluster by unchecking the publicly accessible option.

Create an interface VPC endpoint that uses AWS PrivateLink for RDS Data API.

Create a gateway VPC endpoint for RDS Data API.

Explanation:

https://aws.amazon.com/about-aws/whats-new/2020/02/amazon-rds-data-api-now-supports-aws-
privatelink/

32 / 60

A database expert is responsible for building a highly available online transaction processing (OLTP)
solution that makes use of Amazon RDS for MySQL production databases. Disaster recovery criteria
include a cross-regional deployment and an RPO and RTO of 5 and 30 minutes, respectively.
What should the database professional do to ensure that the database meets the criteria for high
availability and disaster recovery?

Use a Multi-AZ deployment in each Region.

Use read replica deployments in all Availability Zones of the secondary Region.

Use Multi-AZ and read replica deployments within a Region.

Use Multi-AZ and deploy a read replica in a secondary Region.

33 / 60

A company’s ecommerce website uses Amazon DynamoDB for purchase orders. Each order is made up of
a Customer ID and an Order ID. The DynamoDB table uses the Customer ID as the partition key and the
Order ID as the sort key.
To meet a new requirement, the company also wants the ability to query the table by using a third
attribute named Invoice ID. Queries using the Invoice ID must be strongly consistent. A database
specialist must provide this capability with optimal performance and minimal overhead.
What should the database administrator do to meet these requirements?

Add a global secondary index on Invoice ID to the existing table.

Add a local secondary index on Invoice ID to the existing table.

Recreate the table by using the latest snapshot while adding a local secondary index on Invoice ID.

Use the partition key and a FilterExpression parameter with a filter on Invoice ID for all queries.

Explanation:
as Local secondary index can only be created while creating the Dynamodb table. and query needs to use
third attribute on top of primary and sort key, so Local Secondary index has primary and sort key as well
as the third attribute. Global secondary index can be created without primary and sort key

34 / 60

A company has an ecommerce website that runs on AWS. The website uses an Amazon RDS for MySQL
database. A database specialist wants to enforce the use of temporary credentials to access the
database.
Which solution will meet this requirement?

Use MySQL native database authentication.

Use AWS Secrets Manager to rotate the credentials.

Use AWS Identity and Access Management (IAM) database authentication.

Use AWS Systems Manager Parameter Store for authentication.

35 / 60

A company is launching a new Amazon RDS for MySQL Multi-AZ DB instance to be used as a data store
for a custom-built application. After a series of tests with point-in-time recovery disabled, the company
decides that it must have point-in-time recovery reenabled before using the DB instance to store
production data.
What should a database specialist do so that point-in-time recovery can be successful?

Enable binary logging in the DB parameter group used by the DB instance.

Modify the DB instance and enable audit logs to be pushed to Amazon CloudWatch Logs.

Modify the DB instance and configure a backup retention period

Set up a scheduled job to create manual DB instance snapshots.

Explanation:
You can restore a DB instance to a specific point in time (PITR), creating a new DB instance. To support
PITR, your DB instances must have backup retention set to a nonzero value.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-backup-sqlserver.html

https://aws.amazon.com/blogs/database/setting-up-a-binlog-server-for-amazon-rds-mysql-and-
mariadb-using-mariadb-maxscale/

"After you run the command, it’s okay to enable backup retention on the RDS instance by using the AWS
CLI or the console. Enabling backup retention also enables binary logging."

https://aws.amazon.com/blogs/storage/point-in-time-recovery-and-continuous-backup-for-amazon-rds-
with-aws-backup/

36 / 60

A company wants to migrate its on-premises MySQL databases to Amazon RDS for MySQL. To comply
with the company’s security policy, all databases must be encrypted at rest. RDS DB instance snapshots
must also be shared across various accounts to provision testing and staging environments.
Which solution meets these requirements?

Create an RDS for MySQL DB instance with an AWS Key Management Service (AWS KMS) customer managed CMK. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Create an RDS for MySQL DB instance with an AWS managed CMK. Create a new key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Create an RDS for MySQL DB instance with an AWS owned CMK. Create a new key policy to include the administrator user name of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Create an RDS for MySQL DB instance with an AWS CloudHSM key. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Explanation:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ShareSnapshot.html

37 / 60

A manufacturing company has an. inventory system that stores information in an Amazon Aurora MySQL
DB cluster. The database tables are partitioned. The database size has grown to 3 TB. Users run one-time
queries by using a SQL client. Queries that use an equijoin to join large tables are taking a long time to
run.
Which action will improve query performance with the LEAST operational effort?

Migrate the database to a new Amazon Redshift data warehouse.

Enable hash joins on the database by setting the variable optimizer_switch to hash_join=on.

Take a snapshot of the DB cluster. Create a new DB instance by using the snapshot, and enable parallel query mode.

Add an Aurora read replica.

Explanation:
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.BestPractices.html

38 / 60

A financial organization must ensure that the most current 90 days of MySQL database backups are
accessible. Amazon RDS for MySQL DB instances are used to host all MySQL databases. A database
expert must create a solution that satisfies the criteria for backup retention with the least amount of
development work feasible.
Which strategy should the database administrator take?

Use AWS Backup to build a backup plan for the required retention period. Assign the DB instances to the backup plan.

Modify the DB instances to enable the automated backup option. Select the required backup retention period.

Automate a daily cron job on an Amazon EC2 instance to create MySQL dumps, transfer to Amazon S3, and implement an S3 Lifecycle policy to meet the retention requirement.

Use AWS Lambda to schedule a daily manual snapshot of the DB instances. Delete snapshots that exceed the retention requirement.

Explanation:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.ht
ml

39 / 60

A company has two separate AWS accounts: one for the business unit and another for corporate

analytics. The company wants to replicate the business unit data stored in Amazon RDS for MySQL in us-
east-1 to its corporate analytics Amazon Redshift environment in us-west-1. The company wants to use

AWS DMS with Amazon RDS as the source endpoint and Amazon Redshift as the target endpoint.
Which action will allow AVS DMS to perform the replication?

Configure the AWS DMS replication instance in the same account and Region as Amazon Redshift.

Configure the AWS DMS replication instance in the same account as Amazon Redshift and in the same Region as Amazon RDS.

Configure the AWS DMS replication instance in its own account and in the same Region as Amazon Redshift.

Configure the AWS DMS replication instance in the same account and Region as Amazon RDS.

Explanation:
https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.Redshift.html

40 / 60

A database specialist is designing an enterprise application for a large company. The application uses
Amazon DynamoDB with DynamoDB Accelerator (DAX).
The database specialist observes that most of the queries are not found in the DAX cache and that they
still require DynamoDB table reads.
What should the database specialist review first to improve the utility of DAX?

The DynamoDB ConsumedReadCapacityUnits metric

The trust relationship to perform the DynamoDB API calls

The DAX cluster's TTL setting

The validity of customer-specified AWS Key Management Service (AWS KMS) keys for DAX encryption at rest

Explanation:

https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DAX.cluster-
management.html#DAX.cluster-management.custom-settings.ttl

41 / 60

A Database Specialist is creating Amazon DynamoDB tables, Amazon CloudWatch alarms, and associated
infrastructure for an Application team using a development AWS account. The team wants a deployment
method that will standardize the core solution components while managing environment-specific
settings separately, and wants to minimize rework due to configuration errors.
Which process should the Database Specialist recommend to meet these requirements?

Organize common and environmental-specific parameters hierarchically in the AWS Systems Manager Parameter Store, then reference the parameters dynamically from an AWS CloudFormation template. Deploy the CloudFormation stack using the environment name as a parameter.

Create a parameterized AWS CloudFormation template that builds the required objects. Keep separate environment parameter files in separate Amazon S3 buckets. Provide an AWS CLI command that deploys the CloudFormation stack directly referencing the appropriate parameter bucket.

Create a parameterized AWS CloudFormation template that builds the required objects. Import the template into the CloudFormation interface in the AWS Management Console. Make the required changes to the parameters and deploy the CloudFormation stack.

Create an AWS Lambda function that builds the required objects using an AWS SDK. Set the required parameter values in a test event in the Lambda console for each environment that the Application team can modify, as needed. Deploy the infrastructure by triggering the test event in the console.

Explanation:

https://aws.amazon.com/blogs/mt/integrating-aws-cloudformation-with-aws-systems-manager-
parameter-store/

42 / 60

In North America, a business launched a mobile game that swiftly expanded to 10 million daily active
players. The game's backend is hosted on AWS and makes considerable use of a TTL-configured Amazon
DynamoDB table.
When an item is added or changed, its TTL is set to 600 seconds plus the current epoch time. The game
logic is reliant on the purging of outdated data in order to compute rewards points properly. At times,
items from the table are read that are many hours beyond their TTL expiration.
How should a database administrator resolve this issue?

Use a client library that supports the TTL functionality for DynamoDB.

Include a query filter expression to ignore items with an expired TTL.

Set the ConsistentRead parameter to true when querying the table.

Create a local secondary index on the TTL attribute.

Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/howitworks-ttl.html

43 / 60

A database specialist needs to configure an Amazon RDS for MySQL DB instance to close non-interactive
connections that are inactive after 900 seconds.
What should the database specialist do to accomplish this task?

Create a custom DB parameter group and set the wait_timeout parameter value to 900. Associate the DB instance with the custom parameter group.

Connect to the MySQL database and run the SET SESSION wait_timeout=900 command.

Edit the my.cnf file and set the wait_timeout parameter value to 900. Restart the DB instance.

Modify the default DB parameter group and set the wait_timeout parameter value to 900.

Explanation:

https://aws.amazon.com/fr/blogs/database/best-practices-for-configuring-parameters-for-amazon-rds-
for-mysql-part-3-parameters-related-to-security-operational-manageability-and-connectivity-timeout/

"You can set parameters globally using a parameter group. Alternatively, you can set them for a

particular session using the SET command." https://aws.amazon.com/blogs/database/best-practices-for-
configuring-parameters-for-amazon-rds-for-mysql-part-1-parameters-related-to-performance/

44 / 60

A company is building a new web platform where user requests trigger an AWS Lambda function that performs an insert into an Amazon Aurora MySQL DB cluster. Initial tests with less than 10 users on the
new platform yielded successful execution and fast response times. However, upon more extensive tests
with the actual target of 3,000 concurrent users, Lambda functions are unable to connect to the DB
cluster and receive too many connections errors.
Which of the following will resolve this issue?

Edit the my.cnf file for the DB cluster to increase max_connections

Increase the instance size of the DB cluster

Change the DB cluster to Multi-AZ

Increase the number of Aurora Replicas

Explanation:
Max_connection is a formula in RDS parameter group:
GREATEST({log(DBInstanceClassMemory/805306368)*45},{log(DBInstanceClassMemory/8187281408)*1
000})
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Managing.Performan
ce.html
You can increase the maximum number of connections to your Aurora MySQL DB instance by scaling the
instance up to a DB instance class with more memory, or by setting a larger value for the
max_connections parameter in the DB parameter group for your instance, up to 16,000. You must
change a larger value for the max_connections parameter in the DB parameter group, not edit my.cnf, it
is not physical server hosting MySQL.

45 / 60

A database specialist is working on an Amazon RDS for PostgreSQL DB instance that is experiencing
application performance issues due to the addition of new workloads. The database has 5 ׀¢׀ ‘of storage
space with Provisioned IOPS. Amazon CloudWatch metrics show that the average disk queue depth is
greater than
200 and that the disk I/O response time is significantly higher than usual.
What should the database specialist do to improve the performance of the application immediately?

Increase the Provisioned IOPS rate on the storage.

Increase the available storage space.

Use General Purpose SSD (gp2) storage with burst credits.

Create a read replica to offload Read IOPS from the DB instance.

46 / 60

A company is writing a new survey application to be used with a weekly televised game show. The
application will be available for 2 hours each week. The company expects to receive over 500,000 entries
every week, with each survey asking 2-3 multiple choice questions of each user. A Database Specialist
needs to select a platform that is highly scalable for a large number of concurrent writes to handle he
anticipated volume.
Which AWS services should the Database Specialist consider? (Choose two.)

Amazon DynamoDB

Amazon Redshift

Amazon Neptune

Amazon Elasticsearch Service

Amazon ElastiCache

Explanation:

https://docs.aws.amazon.com/AmazonElastiCache/latest/mem-
ug/Strategies.html#Strategies.WriteThrough

https://aws.amazon.com/products/databases/real-time-apps-elasticache-for-redis/

47 / 60

A Database Specialist is planning to create a read replica of an existing Amazon RDS for MySQL Multi-AZ
DB instance. When using the AWS Management Console to conduct this task, the Database Specialist
discovers that the source RDS DB instance does not appear in the read replica source selection box, so
the read replica cannot be created.
What is the most likely reason for this?

The source DB instance has to be converted to Single-AZ first to create a read replica from it.

Enhanced Monitoring is not enabled on the source DB instance.

The minor MySQL version in the source DB instance does not support read replicas.

Automated backups are not enabled on the source DB instance.

>Your source DB instance must have backup retention enabled.
https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstanceReadReplica.htm
l
Reference: https://aws.amazon.com/rds/features/read-replicas/

48 / 60

A clothing company uses a custom ecommerce application and a PostgreSQL database to sell clothes to
thousands of users from multiple countries. The company is migrating its application and database from
its on- premises data center to the AWS Cloud. The company has selected Amazon EC2 for the
application and Amazon RDS for PostgreSQL for the database. The company requires database passwords
to be changed every 60 days. A Database Specialist needs to ensure that the credentials used by the web
application to connect to the database are managed securely.
Which approach should the Database Specialist take to securely manage the database credentials?

Store the credentials in a text file in an Amazon S3 bucket. Restrict permissions on the bucket to the IAM role associated with the instance profile only. Modify the application to download the text file and retrieve the credentials on start up. Update the text file every 60 days.

Configure IAM database authentication for the application to connect to the database. Create an IAM user and map it to a separate database user for each ecommerce user. Require users to update their passwords every 60 days.

Store the credentials in AWS Secrets Manager. Restrict permissions on the secret to only the IAM role associated with the instance profile. Modify the application to retrieve the credentials from Secrets Manager on start up. Configure the rotation interval to 60 days.

Store the credentials in an encrypted text file in the application AMI. Use AWS KMS to store the key for decrypting the text file. Modify the application to decrypt the text file and retrieve the credentials on start up. Update the text file and publish a new AMI every 60 days.

49 / 60

A company has a production Amazon Aurora Db cluster that serves both online transaction processing
(OLTP) transactions and compute-intensive reports. The reports run for 10% of the total cluster uptime
while the OLTP transactions run all the time. The company has benchmarked its workload and
determined that a six-node Aurora DB cluster is appropriate for the peak workload.

The company is now looking at cutting costs for this DB cluster, but needs to have a sufficient number of
nodes in the cluster to support the workload at different times. The workload has not changed since the
previous benchmarking exercise.
How can a Database Specialist address these requirements with minimal user involvement?

Split up the DB cluster into two different clusters: one for OLTP and the other for reporting. Monitor and set up replication between the two clusters to keep data consistent.

Review all evaluate the peak combined workload. Ensure that utilization of the DB cluster node is at an acceptable level. Adjust the number of instances, if necessary.

Use the stop cluster functionality to stop all the nodes of the DB cluster during times of minimal workload. The cluster can be restarted again depending on the workload at the time.

Set up automatic scaling on the DB cluster. This will allow the number of reader nodes to adjust automatically to the reporting workload, when needed.

50 / 60

A stock market analysis firm maintains two locations: one in the us-east-1 Region and another in the eu-
west-2 Region. The business want to build an AWS database solution capable of providing rapid and

accurate updates.
Dashboards with advanced analytical queries are used to present data in the eu-west-2 office. Because
the corporation will use these dashboards to make purchasing choices, they must have less than a
second to obtain application data.
Which solution satisfies these criteria and gives the MOST CURRENT dashboard?

Deploy an Amazon RDS DB instance in us-east-1 with a read replica instance in eu-west-2. Create an Amazon ElastiCache cluster in eu-west-2 to cache data from the read replica to generate the dashboards.

Use an Amazon DynamoDB global table in us-east-1 with replication into eu-west-2. Use multi-active replication to ensure that updates are quickly propagated to eu-west-2.

Use an Amazon Aurora global database. Deploy the primary DB cluster in us-east-1. Deploy the secondary DB cluster in eu-west-2. Configure the dashboard application to read from the secondary cluster.

Deploy an Amazon RDS for MySQL DB instance in us-east-1 with a read replica instance in eu-west-2. Configure the dashboard application to read from the read replica.

Explanation:
Amazon Aurora global databases span multiple AWS Regions, enabling low latency global reads and
providing fast recovery from the rare outage that might affect an entire AWS Region. An Aurora global
database has a primary DB cluster in one Region, and up to five secondary DB clusters in different

Regions. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-global-
database.html

51 / 60

A company stores critical data for a department in Amazon RDS for MySQL DB instances. The department
was closed for 3 weeks and notified a database specialist that access to the RDS DB instances should not
be granted to anyone during this time. To meet this requirement, the database specialist stopped all the
DB instances used by the department but did not select the option to create a snapshot. Before the 3
weeks expired, the database specialist discovered that users could connect to the database successfully.
What could be the reason for this?

When stopping the DB instance, the option to create a snapshot should have been selected.

When stopping the DB instance, the duration for stopping the DB instance should have been selected.

Stopped DB instances will automatically restart if the number of attempted connections exceeds the threshold set.

Stopped DB instances will automatically restart if the instance is not manually started after 7 days.

Explanation:
https://aws.amazon.com/premiumsupport/knowledge-center/rds-stop-seven-days/

52 / 60

A company is concerned about the cost of a large-scale, transactional application using Amazon
DynamoDB that only needs to store data for 2 days before it is deleted. In looking at the tables, a
Database Specialist notices that much of the data is months old, and goes back to when the application
was first deployed.
What can the Database Specialist do to reduce the overall cost?

Create a new attribute in each table to track the expiration time and create an AWS Glue transformation to delete entries more than 2 days old.

Create a new attribute in each table to track the expiration time and enable DynamoDB Streams on each table.

Create a new attribute in each table to track the expiration time and enable time to live (TTL) on each table.

Create an Amazon CloudWatch Events event to export the data to Amazon S3 daily using AWS Data Pipeline and then truncate the Amazon DynamoDB table.

Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/TTL.html

53 / 60

A database specialist is building a system that uses a static vendor dataset of postal codes and related
territory information that is less than 1 GB in size. The dataset is loaded into the application’s cache at
start up. The company needs to store this data in a way that provides the lowest cost with a low
application startup time.
Which approach will meet these requirements?

Use an Amazon RDS DB instance. Shut down the instance once the data has been read.

Use Amazon Aurora Serverless. Allow the service to spin resources up and down, as needed.

Use Amazon DynamoDB in on-demand capacity mode.

Use Amazon S3 and load the data from flat files.

Explanation:

https://www.sumologic.com/insight/s3-cost-optimization/
For example, for 1 GB file stored on S3 with 1 TB of storage provisioned, you are billed for 1 GB only. In a
lot of other services such as Amazon EC2, Amazon Elastic Block Storage (Amazon EBS) and Amazon
DynamoDB you pay for provisioned capacity. For example, in the case of Amazon EBS disk you pay for the
size of 1 TB of disk even if you just save 1 GB file. This makes managing S3 cost easier than many other
services including Amazon EBS and Amazon EC2. On S3 there is no risk of over-provisioning and no need
to manage disk utilization.

54 / 60

A company hosts an on-premises Microsoft SQL Server Enterprise edition database with Transparent
Data Encryption (TDE) enabled. The database is 20 TB in size and includes sparse tables. The company
needs to migrate the database to Amazon RDS for SQL Server during a maintenance window that is
scheduled for an upcoming weekend. Data-at-rest encryption must be enabled for the target DB
instance.
Which combination of steps should the company take to migrate the database to AWS in the MOST
operationally efficient manner? (Choose two.)

Use AWS Database Migration Service (AWS DMS) to migrate from the on-premises source database to the RDS for SQL Server target database.

Disable TDE. Create a database backup without encryption. Copy the backup to Amazon S3.

Restore the backup to the RDS for SQL Server DB instance. Enable TDE for the RDS for SQL Server DB instance.

Set up an AWS Snowball Edge device. Copy the database backup to the device. Send the device to AWS. Restore the database from Amazon S3.

Encrypt the data with client-side encryption before transferring the data to Amazon RDS.

Explanation:

https://aws.amazon.com/blogs/database/migrate-tde-enabled-sql-server-databases-to-amazon-rds-for-
sql-server/

55 / 60

A large retail company recently migrated its three-tier ecommerce applications to AWS. The company’s
backend database is hosted on Amazon Aurora PostgreSQL. During peak times, users complain about
longer page load times. A database specialist reviewed Amazon RDS Performance Insights and found a
spike in IO:XactSync wait events. The SQL attached to the wait events are all single INSERT statements.
How should this issue be resolved?

Modify the application to commit transactions in batches

Add a new Aurora Replica to the Aurora DB cluster.

Add an Amazon ElastiCache for Redis cluster and change the application to write through.

Change the Aurora DB cluster storage to Provisioned IOPS (PIOPS).

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Reference.html
"This wait most often arises when there is a very high rate of commit activity on the system. You can
sometimes alleviate this wait by modifying applications to commit transactions in batches. "
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/apg-waits.xactsync.html

56 / 60

A startup company in the travel industry wants to create an application that includes a personal travel
assistant to display information for nearby airports based on user location. The application will use
Amazon DynamoDB and must be able to access and display attributes such as airline names, arrival
times, and flight numbers. However, the application must not be able to access or display pilot names or
passenger counts.
Which solution will meet these requirements MOST cost-effectively?

Use a proxy tier between the application and DynamoDB to regulate access to specific tables, items, and attributes.

Use IAM policies with a combination of IAM conditions and actions to implement fine-grained access control.

Use DynamoDB resource policies to regulate access to specific tables, items, and attributes.

Configure an AWS Lambda function to extract only allowed attributes from tables based on user profiles.

Explanation:
https://aws.amazon.com/blogs/aws/fine-grained-access-control-for-amazon-dynamodb/

57 / 60

After restoring an Amazon RDS snapshot from 3 days ago, a company’s Development team cannot
connect to the restored RDS DB instance. What is the likely cause of this problem?

The restored DB instance does not have Enhanced Monitoring enabled

The production DB instance is using a custom parameter group

The restored DB instance is using the default security group

The production DB instance is using a custom option group

Explanation:
https://aws.amazon.com/premiumsupport/knowledge-center/rds-cannot-connect/
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_RestoreFromSnapshot.html

58 / 60

A business's production databases are housed on a 3 TB Amazon Aurora MySQL DB cluster. The database
cluster is installed in the region us-east-1. For disaster recovery (DR) requirements, the company's
database expert needs to fast deploy the DB cluster in another AWS Region to handle the production
load with an RTO of less than two hours.
Which approach is the MOST OPERATIONALLY EFFECTIVE in meeting these requirements?

Implement an AWS Lambda function to take a snapshot of the production DB cluster every 2 hours, and copy that snapshot to an Amazon S3 bucket in the DR Region. Restore the snapshot to an appropriately sized DB cluster in the DR Region.

Add a cross-Region read replica in the DR Region with the same instance type as the current primary instance. If the read replica in the DR Region needs to be used for production, promote the read replica to become a standalone DB cluster.

Create a smaller DB cluster in the DR Region. Configure an AWS Database Migration Service (AWS DMS) task with change data capture (CDC) enabled to replicate data from the current production DB cluster to the DB cluster in the DR Region.

Create an Aurora global database that spans two Regions. Use AWS Database Migration Service (AWS DMS) to migrate the existing database to the new global database.

RTO is 2 hours. With 3 TB database, cross-region replica is a better option

59 / 60

A company is moving its fraud detection application from on premises to the AWS Cloud and is using
Amazon Neptune for data storage. The company has set up a 1 Gbps AWS Direct Connect connection to
migrate 25 TB of fraud detection data from the on-premises data center to a Neptune DB instance. The
company already has an Amazon S3 bucket and an S3 VPC endpoint, and 80% of the company’s network
bandwidth is available.
How should the company perform this data load?

Use an AWS SDK with a multipart upload to transfer the data from on premises to the S3 bucket. Use the Copy command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Use AWS Database Migration Service (AWS DMS) to transfer the data from on premises to the S3 bucket. Use the Loader command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Use AWS DataSync to transfer the data from on premises to the S3 bucket. Use the Loader command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Use the AWS CLI to transfer the data from on premises to the S3 bucket. Use the Copy command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

"AWS DataSync is an online data transfer service that simplifies, automates, and accelerates moving
data between on-premises storage systems and AWS storage services, and also between AWS storage
services."
https://docs.aws.amazon.com/neptune/latest/userguide/bulk-load.html

60 / 60

A company's database specialist is building an Amazon RDS for Microsoft SQL Server DB instance to store
hundreds of records in CSV format. A customer service tool uploads the records to an Amazon S3 bucket.
An employee who previously worked at the company already created a custom stored procedure to map
the necessary CSV fields to the database tables. The database specialist needs to implement a solution
that reuses this previous work and minimizes operational overhead.
Which solution will meet these requirements?

Create an Amazon S3 event to invoke an AWS Lambda function. Configure the Lambda function to parse the .csv file and use a SQL client library to run INSERT statements to load the data into the tables.

Write a custom .NET app that is hosted on Amazon EC2. Configure the .NET app to load the .csv file and call the custom stored procedure to insert the data into the tables.

Download the .csv file from Amazon S3 to the RDS D drive by using an AWS msdb stored procedure. Call the custom stored procedure to insert the data from the RDS D drive into the tables.

Create an Amazon S3 event to invoke AWS Step Functions to parse the .csv file and call the custom stored procedure to insert the data into the tables.

Explanation:
Step 1: Download S3 Files
Amazon RDS for SQL Server comes with several custom stored procedures and functions. These are
located in the msdb database. The stored procedure to download files from S3 is
"rds_download_from_s3". The syntax for this stored procedure is shown here:
exec msdb.dbo.rds_download_from_s3
@s3_arn_of_file='arn:aws:s3:::<bucket_name>/<file_name>',
@rds_file_path='D:\S3\<custom_folder_name>\<file_name>',
@overwrite_file=1;

Please fill the below Information to start the practice exam 👍

कृपया नीचे दी गई जानकारी भरें 🙌

Your score is

LinkedIn Facebook Twitter VKontakte

Exit

Best of luck !! Your Time Start's Now 👍

Time Over Now 👍

AWS Certified Cloud Practitioner(CLF-C01) Practice Test-1 Updated April 2023

AWS Certified Cloud Practitioner(CLF-C01) Practice Test-1 practice exam consists of 60 questions, and you will have 120 minutes to complete the exam. In order to pass the exam, you must achieve a score of at least 70%.

Once you have successfully passed the AWS Certified Cloud Practitioner(CLF-C01) Practice Test-1 with a score of at least 70%, you will receive a certificate via email.

1 / 59

A company manages an on-premises MySQL database on a Windows server. The company wants to
migrate the database to AWS and needs a solution that will reduce the administrative overhead of the
database.
Which AWS service will meet this requirement?

Amazon Redshift

Amazon ElastiCache

Amazon RDS

Amazon Elastic File System (Amazon EFS)

2 / 59

Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and
caches the data locally for low-latency access?

AWS Direct Connect

AWS Storage Gateway

Amazon S3

AWS Snowball Edge

Storage Gateway enables on-premises applications to use cloud storage by providing low-latency data
access over standard storage protocols.

3 / 59

A company is running multiple workloads in the AWS Cloud and recently began investigating ways to
reduce costs. The company is already running fault-tolerant workloads on Amazon EC2 that perform
periodic checkpoints in case of an outage.
Which AWS service or pricing model can provide the GREATEST cost savings?

Capacity Reservations

Amazon Lightsail

Spot Instances

Dedicated Hosts

4 / 59

Which AWS service is a fully hosted version control service?

AWS CodeCommit

AWS CodeBuild

AWS CodeDeploy

AWS CodeStar

CodeCommit is a secure, highly scalable, managed source control service that hosts private Git
repositories. CodeCommit eliminates the need for you to manage your own source control system or
worry about scaling its infrastructure. You can use CodeCommit to store anything from code to binaries.
It supports the standard functionality of Git, so it works seamlessly with your existing Git-based tools.

5 / 59

Which guidelines are key AWS architectural design principles? (Select TWO.)

Design for fixed resources.

Build scalable architectures.

Use tightly coupled components.

Use managed services when possible.

Design for human interaction.

6 / 59

A company needs to automatically protect its Amazon EC2 instances from distributed denial of service
(DDoS) attacks. Which AWS service or tool will provide this protection?

Network access control list (ACL)

AWS Shield

Security group

Amazon GuardDuty

7 / 59

A company runs a web application on Amazon EC2 instances. The application has consistent usage and is
expected to run indefinitely. Which EC2 instance purchasing option will meet these requirements MOST
cost-effectively?

1-year All Upfront Reserved Instances

1-year No Upfront Reserved Instances

3-year All Upfront Reserved Instances

3-year No Upfront Reserved Instances

8 / 59

Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from
infrastructure or service disruptions and dynamically acquire computing resources to meet demand?

Security

Reliability

Performance efficiency

Cost optimization

9 / 59

A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur.
What could be causing this? (Select TWO.)

Amazon Elastic Block Store (Amazon EBS) storage charges

Operating system charges

Hardware charges

Elastic IP charges

Input/output (I/O) charges

10 / 59

A company wants to accelerate migration from its data center to the AWS Cloud.
Which combination of AWS services should the company use to meet this requirement? (Select TWO.)

Amazon Connect

AWS Direct Connect

AWS Server Migration Service (AWS SMS)

Amazon Route 53

AWS Organizations

11 / 59

A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling
a production service disruption. Which action should the user take?

Contact the dedicated AWS technical account manager (TAM).

Contact the dedicated AWS Concierge Support team.

Open a business-critical system down support case.

Open a production system down support case.

12 / 59

A company wants to offer direct phone and chat channels for customer service. The company needs a
pay-as-you-go solution that remote customer service agents can use to create and manage voice and
chat contact flows.
Which AWS service will meet these requirements?

Amazon EventBridge (Amazon CloudWatch Events)

Amazon Connect

Amazon Cognito

AWS Direct Connect

13 / 59

A company uses a database that has a simple sign-up page to create users, and a basic login form to
authenticate users so they can access the database. The company wants to give users the ability to store
personal information, but user access must be controlled in a more secure and reliable way.
Which AWS service or feature will meet these requirements?

Security groups

Amazon GuardDuty

AWS Secrets Manager

Amazon Cognito

aws.amazon.com/cognito/

14 / 59

A company that uses AWS needs to transfer 2 TB of data.
Which type of transfer of that data would result in no cost for the company?

Inbound data transfer from the internet

Outbound data transfer to the internet

Data transfer between AWS Regions

Data transfer between Availability Zones

15 / 59

Which design principles of the AWS WelI-Architected Framework help increase reliability? (Select TWO.)

Automatically recover from failure.

Enable traceability.

Scale horizontally to increase workload availability.

Automate security best practices.

Keep people away from data.

Reliability
The Reliability pillar encompasses the ability of a workload to perform its intended function correctly
and consistently when it’s expected to. This includes the ability to operate and test the workload
through its total lifecycle. You can find prescriptive guidance on implementation in the Reliability Pillar
whitepaper.
Design Principles
There are five design principles for reliability in the cloud:
Automatically recover from failure
Test recovery procedures

Scale horizontally to increase aggregate workload availability
Stop guessing capacity
Manage change in automation
https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/

16 / 59

Which of the following does Amazon CloudFront use to distribute content to users around the world?

Amazon VPC

AWS Local Zones

Edge locations

Availability Zones

CloudFront delivers your content through a worldwide network of data centers called edge locations.
The regional edge caches are located between your origin web server and the global edge locations that
serve content directly to your viewers.

17 / 59

A company has a global website with static content.
Which AWS service will deliver the static content with low latency?

AWS Lambda

Amazon CloudFront

Amazon EC2 Auto Scaling

AWS Compute Optimizer

18 / 59

A company wants to improve the overall availability and performance of its applications that are hosted
on AWS.
Which AWS service should the company use?

Amazon Connect

Amazon Lightsail

AWS Global Accelerator

AWS Storage Gateway

19 / 59

What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility
model?

Software licenses

Networking

Customer data

Encryption keys

20 / 59

A company is running an Amazon EC2 instance in a VPC.
Which of the following can the company use to route and filter incoming network requests for the EC2
instance?

Route tables and web application firewalls

Security groups and route tables

Security groups and a network intrusion system

Route tables and AWS Shield

21 / 59

A company is undergoing a security audit. The audit includes security validation and compliance
validation of the AWS infrastructure and services that the company uses. The auditor needs to locate
compliance-related information and must download AWS security and compliance documents. These
documents include the System and Organization Control (SOC) reports.
Which AWS service or group can provide these documents?

AWS Abuse team

AWS Artifact

AWS Support

AWS Config

• Portal that provides customers with on-demand access to AWS compliance documentation and AWS
agreements • Artifact Reports - Allows you to download AWS security and compliance documents from
third-party auditors, like AWS ISO certifications, Payment Card Industry (PCI), and System and
Organization Control (SOC) reports • Artifact Agreements - Allows you to review, accept, and track the
status of AWS agreements such as the Business Associate Addendum (BAA) or the Health Insurance
Portability and Accountability Act (HIPAA) for an individual account or in your organization • Can be
used to support internal audit or compliance

22 / 59

Elasticity in the AWS Cloud refers to which of the following? (Select TWO.)

How quickly an Amazon EC2 instance can be restarted

The ability to right size resources as demand shifts

The maximum amount of RAM an Amazon EC2 instance can use

The pay-as-you-go billing model

How easily resources can be procured when they are needed

The AWS Well-Architected Framework defines elasticity as: The ability to acquire resources as you need
them and release resources when you no longer need them. In the cloud, you want to do this
automatically

https://dev.to/aws-builders/what-does-elastic-mean-cloud-concepts-explained-
4anb#:~:text=The%20AWS%20Well%2DArchitected%20Framework%20defines%20elasticity%20as%3A,

want%20to%20do%20this%20automatically.

23 / 59

A company is reviewing the current costs of running its own infrastructure on premises. The company
wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud.
How should the company make this comparison?

Review the AWS shared responsibility model.

Audit existing software and hardware licensing costs.

Analyze the AWS Well-Architected Framework.

Use Migration Evaluator.

24 / 59

Which AWS service is a relational database compatible with MySQL and PostgreSQL?

Amazon Redshift

Amazon DynamoDB

Amazon Aurora

Amazon Neptune

25 / 59

Which AWS service allows for file sharing between multiple Amazon EC2 instances?

AWS Direct Connect

AWS Snowball Edge

AWS Backup

Amazon Elastic File System (Amazon EFS)

Amazon EFS provides shared file storage for use with compute instances in the AWS Cloud and on-
premises servers. Applications that require shared file access can use Amazon EFS for reliable file

storage delivering high aggregate throughput to thousands of clients simultaneously.

26 / 59

A user has been granted permission to change their own IAM user password. Which AWS services can
the user use to change the password? (Select TWO.)

AWS Command Line Interface (AWS CLI)

AWS Key Management Service (AWS KMS)

AWS Management Console

AWS Resource Access Manager (AWS RAM)

AWS Secrets Manager

27 / 59

Which AWS service supports the analysis, investigation, and identification of the root cause of security
events and suspicious activities in an AWS account?

Amazon Inspector

Amazon Macie

Amazon Detective

Amazon CloudWatch

Amazon Detective makes it easy to analyze, investigate, and quickly identify the root cause of potential
security issues or suspicious activities. Ref
: https://aws.amazon.com/it/detective/features/#:~:text=Amazon%20Detective%20makes%20it%20eas
y,security%20issues%20or%20suspicious%20activities.

28 / 59

Which databases are available on Amazon RDS? (Select TWO.)

Sybase

Microsoft SQL Server

IBM Db2

MongoDB

PostgreSQL

29 / 59

Which AWS service or tool lists all the users in an account and reports on the status of account details,
including passwords, access keys, and multi-factor authentication (MFA) devices?

WS Shield

AWS Trusted Advisor

Amazon Inspector

IAM credential report

You can generate and download a credential report that lists all users in your account and the status of
their various credentials, including passwords, access keys, and MFA devices. You can get a credential
report from the AWS Management Console, the AWS SDKs and Command Line Tools , or the IAM API.

30 / 59

Which AWS service or feature enables users to block the incoming or outgoing traffic associated with
specific IP addresses flowing through a VPC?

Network ACLs

Security groups

AWS Identity and Access Management (1AM)

AWS WAF

To allow or block specific IP addresses for your EC2 instances, use a network Access Control List (ACL) or
security group rules in your VPC. Network ACLs and security group rules act as firewalls allowing or
blocking IP addresses from accessing your resources

31 / 59

A company is running and managing its own Docker environment on Amazon EC2 instances. The
company wants an alternative to help manage cluster size, scheduling, and environment maintenance.
Which AWS service meets these requirements?

AWS Lambda

Amazon RDS

AWS Fargate

Amazon Athena

32 / 59

Which of the following is the customer responsible for updating and patching, according to the AWS
shared responsibility model?

Amazon FSx for Windows File Server

Amazon Workspaces virtual Windows desktop

AWS Directory Service for Microsoft Active Directory

Amazon RDS for Microsoft SQL Server

33 / 59

According to the AWS shared responsibility model, which activities are the customer's responsibility for
security in the AWS Cloud? (Select TWO.)

Hardware maintenance

Amazon EC2 operating system patching

API access control for AWS resources

Configuration management of infrastructure devices

Maintenance of an Availability Zone

34 / 59

A company needs to design an AWS disaster recovery plan to cover multiple geographic areas. Which
action will meet this requirement?

Configure multiple AWS accounts.

Configure the architecture across multiple Availability Zones in an AWS Region.

Configure the architecture across multiple AWS Regions.

Configure the architecture among many edge locations.

35 / 59

A company requires an isolated environment within AWS for security purposes. Which action can be
taken to accomplish this?

Create a separate Availability Zone to host the resources.

Create a separate VPC to host the resources.

Create a placement group to host the resources.

Create an AWS Direct Connect connection between the company and AWS.

Network isolation A virtual private cloud (VPC) is a virtual network in your own logically isolated area in
the AWS Cloud. Use separate VPCs to isolate infrastructure by workload or organizational entity. A
subnet is a range of IP addresses in a VPC. When you launch an instance, you launch it into a subnet in
your VPC. Use subnets to isolate the tiers of your application (for example, web, application, and
database) within a single VPC. Use private subnets for your instances if they should not be accessed
directly from the internet. To call the Amazon EC2 API from your VPC without sending traffic over the
public internet, use AWS PrivateLink.
https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html

36 / 59

A company wants to set up an entire development and continuous delivery toolchain for coding,
building, testing, and deploying application code. Which AWS service will meet these requirements?

Amazon CodeGuru

AWS CodeStar

AWS CodeCommit

AWS CodeDeploy

37 / 59

Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to
reduce latencies from the end user to Amazon S3?

S3 Cross-Region Replication

S3 Transfer Acceleration

S3 Event Notifications

S3 Standard-Infrequent Access (S3 Standard-IA)

S3TA improves transfer performance by routing traffic through Amazon CloudFront's globally distributed
Edge Locations and over AWS backbone networks, and by using network protocol optimizations.

38 / 59

Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS
accounts?

AWS Organizations

Cost Explorer

AWS Trusted Advisor

AWS Management Console

You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for
multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every
organization in AWS Organizations has a management account that pays the charges of all the member
accounts.

39 / 59

Which service is an AWS in-memory data store service?

Amazon Aurora

Amazon RDS

Amazon DynamoDB

Amazon ElastiCache

40 / 59

Which AWS service can be used to provide an on-demand, cloud-based contact center?

AWS Direct Connect

Amazon Connect

AWS Support Center

AWS Managed Services

https://aws.amazon.com/connect/

41 / 59

A user is a new AWS account owner who has no special access requirements. What should this user do
with the AWS account root user access keys?

Share the keys with all relevant internal users so that those users can programmatically access AWS services.

Post the keys on GitHub to provide development teams with access to AWS services.

Use the keys for access, but do not share the keys with anyone.

Delete the keys and create IAM users.

42 / 59

Which of the following are design principles of the reliability pillar of the AWS Well-Architected
Framework? (Select TWO.)

Perform operations as code.

Stop guessing capacity.

Adopt serverless architecture whenever possible.

Use build and deployment management systems.

Make changes to infrastructure by using automation.

43 / 59

A company needs to perform data processing once a week that typically takes about 5 hours to
complete. Which AWS service should the company use for this workload?

AWS Lambda

Amazon EC2

AWS CodeDeploy

AWS Wavelength

44 / 59

Which AWS services provide high availability across multiple Availability Zones by default? (Select TWO.)

Amazon EC2

Amazon Elastic Block Store (Amazon EBS)

Amazon Elastic File System (Amazon EFS)

Amazon Redshift

Amazon S3

45 / 59

A company is moving its on-premises NoSQL database to the AWS Cloud Which AWS service should the
company use for the NoSQL database?

Amazon Redshift

Amazon RDS for MySQL

Amazon Quantum Ledger Database (Amazon QLDB)

Amazon DynamoDB

46 / 59

A company is planning to build a workload in the AWS Cloud. The company needs to estimate the costs
of the network, compute, storage, and database for the workload. Which AWS service or tool should the
company use to generate this estimate?

AWS Budgets

AWS Organizations

Cost Explorer

AWS Pricing Calculator

47 / 59

A company is using Amazon RDS.
Which task is the company's responsibility, according to the AWS shared responsibility model?

Apply encryption options for the database.

Manage the underlying server hardware on which Amazon RDS runs.

Apply patches to the underlying operating system.

Apply minor patches to the database.

48 / 59

A company needs to deploy an Amazon EC2 instance and attach a storage mount for the operating
system and application files. Which AWS service will meet these requirements?

AWS Backup

Amazon Elastic File System (Amazon EFS)

Amazon S3

Amazon Elastic Block Store (Amazon EBS)

49 / 59

A company's system administrator discovers that someone logged in to the company's AWS account
during the weekend and terminated an Amazon EC2 instance Which AWS service should the system
administrator use to identify who made this change?

Amazon Inspector

Amazon Pinpoint

AWS CloudTrail

AWS Trusted Advisor

50 / 59

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS
Cloud. Which cost is the company's direct responsibility?

Cost of application software licenses

Cost of the hardware infrastructure on AWS

Cost of power for the AWS servers

Cost of physical security for the AWS data center

51 / 59

Which of the following consists of one or more isolated data centers in the same regional area that are
interconnected through low-latency networks?

Availability Zone

Edge location

AWS Region

Private networking

52 / 59

Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

AWS Personal Health Dashboard

AWS Service Health Dashboard

AWS Trusted Advisor

AWS Infrastructure Event Management

53 / 59

A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive. Which
AWS service can be used to improve the database performance?

Amazon DynamoDB Accelerator (DAX)

Amazon EMR

Amazon ElastiCache

Amazon Redshift

54 / 59

A company wants to use a template to reliably provision, manage, and update its infrastructure in the
AWS Cloud. Which AWS service will meet these requirements?

AWS Lambda

AWS CloudFormation

AWS Fargate

AWS CodeDeploy

55 / 59

Which AWS service offers threat detection and continuously monitors for malicious activity and
unauthorized behavior in AWS accounts?

Amazon Made

AWS Config

Amazon GuardDuty

Amazon Inspector

56 / 59

Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes
and procedures as a priority?

Cost optimization

Reliability

Performance efficiency

Operational excellence

57 / 59

Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes
and procedures as a priority?

Cost optimization

Reliability

Performance efficiency

Operational excellence

58 / 59

Which Reserved Instance (Rl) provides the HIGHEST average cost savings compared to an On-Demand
Instance?

1-year. No Upfront. Standard Rl

1-year. All Upfront. Convertible Rl

3-year. All Upfront, Standard Rl

3-year. No Upfront. Convertible Rl

https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/

59 / 59

Which of the following are advantages of the AWS Cloud? (Select TWO.)

AWS management of user-owned infrastructure

Ability to quickly change required capacity

High economies of scale

Increased deployment time to market

Increased fixed expenses

Please fill the below Information to start the practice exam 👍

कृपया नीचे दी गई जानकारी भरें 🙌

Your score is

LinkedIn Facebook Twitter VKontakte

Exit

Best of luck !! Your Time Start's Now 👍

Time Over Now 👍

AWS Certified Cloud Practitioner(CLF-C01) Practice Test-2 Updated April 2023

AWS Certified Cloud Practitioner(CLF-C01) Practice Test-2 practice exam consists of 60 questions, and you will have 120 minutes to complete the exam. In order to pass the exam, you must achieve a score of at least 70%.

Once you have successfully passed the AWS Certified Cloud Practitioner(CLF-C01) Practice Test-2 with a score of at least 70%, you will receive a certificate via email.

1 / 60

A company wants to use a server less compute service for an application.
When AWS service will meet tins requirement?

AWS Lambda

AWS CloudFormation

AWS Elastic Beanstalk

Elastic Load Balancing

2 / 60

A system administrator notices that several Amazon EC2 instances nave been terminated. The system
administrator needs to identity the user or AWS API call that terminated these instances. Which AWS
service should the system administrator use to meet this requirement?

AWS Trusted Advisor

AWS CloudTrail

Amazon Inspector

Amazon Detective

3 / 60

A company wants to push VPC Flow Logs to an Amazon S3 bucket.
Which action is the company's responsibility?

Managing the infrastructure that runs the S3 bucket.

Managing the data in transit.

Managing the encryption options on the S3 bucket

Managing the operating system updates on the S3 bucket

4 / 60

A company wants to provide managed Windows virtual desktops and applications to its remote
employees over secure network connections.
When AWS services can the company use to meet the requirements? (Select TWO.)

Amazon Connect

Amazon AppStream 2.0

Amazon Workspaces

AWS Site-to-Site VPN

Amazon Elastic Container Service (Amazon ECS)

5 / 60

Which of the following is an advantage of AWS Cloud computing?

Trade security for elasticity

Trade operational excellence for agility

Trade fixed expenses for variable expenses

Trade elasticity for performance.

6 / 60

Which AWS service tool or feature helps companies reduce costs by identifying underutilized Amazon
EC2 instances?

Amazon Inspector

AWS Trusted Advisor

Consolidated billing

Cost Explorer

7 / 60

A company is running a workload on AWS. The company wants to protect the workload from DDoS
attacks.
When AWS service will meet these requirements?

AWS Identity and Access Management (IAM)

AWS Shield

Amazon VPC

AWS Artifact

8 / 60

Which AWS service provides managed DDoS protection?

AWS Firewall Manager

AWS Shield

Amazon GuardDuty

Amazon Inspector

9 / 60

A company needs a data warehouse for analytical workloads. The data warehouse must support
standard SQL queries.
Which AWS service meets these requirements?

Amazon EMR

Amazon Athena

Amazon Redshift

Amazon HDS

10 / 60

Which of the following are advantages of the AWS Cloud? (Select TWO.)

AWS manages all the security within the cloud

Expenses never change from month to month

Users can stop spending money on the maintenance of data centers

Users do not need to deploy applications globally

Users can stop guessing about resource capacity

11 / 60

Which actions is the responsibility of AWS according to the AWS shared responsibility model? (Select
TWO.)

Securing the virtualization layer

Patching the operating system on Amazon EC2 instances

Enforcing a strict password policy for IAM users

Patching the operating system on Amazon RDS instances

Configuring security groups and network ACLs

12 / 60

Which actions is the responsibility of AWS under the AWS shared responsibility model (Select TWO.)

Scanning AWS service endpoints for vulnerabilities

Enabling encryption on an Amazon S3 bucket

Configuring security group rules

Enforcing application access restrictions

Encrypting traffic on the AWS backbone between global and regional AWS facilities

13 / 60

Which fully managed AWS service allows a user to bring their own machine teaming algorithm?

Amazon Forecast

AWS Artifact

AWS Data Pipeline

Amazon SageMaker

14 / 60

A company uses AWS Direct Conned and wants to establish connectivity that spans VPCs across multiple
AWS Regions. Which AWS service or feature should the company use to meet these requirements?

AWS Transit Gateway

AWS PrivateLink

Amazon Connect

Amazon Route 53

15 / 60

A company wants to organize its users so that the company can grant permissions to the users as a
group. Which AWS service or tool can the company use to meet this requirement?

Security groups

AWS identity and Access Management (IAM)

Resource groups

AWS Security Hub

16 / 60

How can a user protect an Amazon EC2 instance from a suspicious IP address?

Block the IP on the inbound rule of a network ACL.

Block the IP on the outbound rule of a security group.

Block the IP on the inbound rule of a security group and network ACL.

Block the IP on the outbound rule of a security group and network ACL.

17 / 60

Which of the following is a component of the AWS Global infrastructure?

Amazon Alexa

AWS Regions

Amazon Lightsail

AWS Organizations

18 / 60

A developer wants to deploy an application on a container-based service. The service must
automatically provision and manage the backend instances. The service must provision only the
necessary resources. Which AWS service will meet these requirements?

Amazon EC2

Amazon Lightsail

Amazon Elastic Kubermetes Service (Amazon EKS)

AWS Margate

19 / 60

A company needs a central user portal so that users can log in to third-party business applications that
support Security Assertion Markup Language (SAML) 2.0.
Which AWS service will meet this requirement?

AWS Identity and Access Management (IAM)

Amazon Cognito

AWS Single Sign-On

AWS CL

20 / 60

A company recently mutated to AWS and wants to enable intelligent threat protection and continuous
monitoring across all of its AWS accounts.
Which AWS service should the company use lo achieve this goal?

Amazon Macie

Amazon GuardDuty

AWS Shield

Amazon Detective

21 / 60

A company has acquired several other companies. All the companies host their IT infrastructure in the
AWS Cloud. Which AWS service should the acquiring company use to centralize the account
management?

AWS Systems Manager

AWS Organizations

AWS Security Hub

Amazon Workspaces

22 / 60

What are characteristics of AWS IAM users and groups? (Select TWO.)

Groups can be nested and can contain other groups.

A user can be a member of multiple groups

Groups can contain users only and cannot be nested

A user can only be a member of a single group at one time.

All new users are automatically added to a default group

23 / 60

How does the AWS global infrastructure offer high availability and fault tolerance lo its users?

The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk and are interconnected with low-latency networks and redundant power supplies

The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location

AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions

The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that ate connected with low-latency networking and redundant power supplies

24 / 60

What is the MOST secure way lo store passwords on AWS?

Store passwords in an Amazon S3 bucket

Store passwords as AWS CloudFormation parameters

Store passwords in AWS Storage Gateway

Store passwords in AWS Secrets Manager

25 / 60

A company wants to design its cloud architecture so that its workloads are resilient can consistently
perform their intended functions correctly and can recover from failure quickly. Which pillar of the AWS
Well-Architected Framework does this architecture represent?

Security

Performance efficiency

Operational excellence

Reliability

26 / 60

Which of the following gives a company the ability to fake advantage of tiered pricing tor services across
multiple AWS member accounts?

AWS Organizations service control policies (SCPs)

AWS Organizations consolidated billing

All Upfront Reserved instances

Cost Explorer utilization reports

27 / 60

An ecommerce comply is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers
running on Amazon EC2. This architecture follows which AWS Well/architected Framework best
practice?

Secure the workload

Decouple infrastructure components

Design for failure

Think parallel

28 / 60

A company has deployed its IT infrastructure in the AWS Cloud. The company's database must support
reads with sub-millisecond latency.
Which AWS service will meet this requirement?

Amazon EMR

Amazon RDS

AWS Glue

Amazon ElastiCache

29 / 60

Which AWS service can a company use to access compliance documentation and AWS agreements?

AWS Security Hub

AWS Identity and Access Management (1AM)

AWS Artifact

AWS Certificate Manager (ACM)

30 / 60

A company wants to receive alerts when resources that are launched in the company's AWS account
reach 80% of their service quotas. Which AWS service should the company use to meet this
requirement?

AWS CloudTrail

AWS Trusted Advisor

AWS Config

Amazon inspector

31 / 60

Which component of the AWS global infrastructure does Amazon CloudFront use to deliver content to
end users with low latency?

Edge locations

AWS Regions

Availability Zones

AWS Direct Connect connections

32 / 60

A company that is migrating to the AWS Cloud wants to reduce the operational costs of running its
databases. Which combination of actions should the company take to achieve this goal (Select TWO.)

Activate Amazon DynamoDB Accelerator (DAX)

Deploy resources across multiple Availability Zones.

Decrease operational tasks by using AWS managed services.

Automate changes and responses to events.

Use the AWS global infrastructure to benefit from economies of scale

33 / 60

Which AWS Cloud benefit is shown by architecture’s ability to withstand with minimal downtime?

Agility

Elasticity

Scalability

High availability

34 / 60

A company's procurement department wants volume discounts on AWS services for the company but
numerous departments have separate AWS accounts. Which AWS service or tool can the company use
to receive volume discounts across multiple AWS accounts?

Cost Explore'

AWS Budgets

AWS Cost and Usage Report

AWS Organizations

35 / 60

Which task is the responsibility of the customer according to the AWS snared responsibility model?

Patch the Amazon DynamoDB operating system

Secure Amazon CloudFront edge locations by allowing physical access according to the principle of least privilege

Protect the hardware that runs AWS services

Use AWS Identity and Access Management (IAM) according to the principle of least privilege

36 / 60

A user needs the ability to access as many resources as are needed. The user also needs the ability to
scale up and scale down with only a few minutes of notice. Which benefit of the AWS Cloud describes
these abilities?

Ratability

Economy of scale

Elasticity

Pay-as-you-go pricing

37 / 60

Which of the following can be used to identity a specific user who slopped an Amazon EC2 instance?

AWS CloudTrail

Amazon inspector

Amazon CloudWatch

VPC Flow Logs

38 / 60

Which AWS services are delivered globally instead of regionally? (Select TWO.)

Amazon EC2

Amazon CloudFront

Amazon Route 53

Amazon VPC

Amazon RDS

39 / 60

Which of the following are benefits that a company receives when it moves an on-premises internet-
lacing website to the AWS Cloud? (Select TWO.)

Data that is stored in the AWS Cloud is automatically encrypted.

Website capacity can expand or contract as website traffic changes.

AWS automatically provides the company with the lowest-cost pricing model.

The website shows up with higher priority in internet search engines

The company can take advantage of the pay-as-you-go pricing model

40 / 60

A company has an on-premises Oracle database. The company spends a significant amount of time on
database administration activities. The company is moving the database to AWS and needs to minimize
the time that is requited lot these administration activities
Which AWS service should the company use to meet this requirement?

Amazon ElastiCache

Amazon EC2

Amazon RDS

Amazon DynamoDB

41 / 60

A company uses Amazon EC2 infrastructure to host steady-stale workloads and needs to achieve
significant cost savings. Which EC2 instance pricing model should the company select?

Reserved instances

On-Demand instances

Spot Instances

Dedicated Hosts

Instances that must be online all the time and have steady or predictable traffic Any baseline usage,
while using On-Demand or Spot Instances for bursts Applications that might require reserved capacity
Customers who can commit to using EC2 over a one-year or 3-year term
https://aws.amazon.com/blogs/startups/optimizing-your-costs-for-aws-services-part-1/

42 / 60

Wh.cn of lite following is advantages of the AWS Cloud? (Select TWO.)

Trade variable expenses tor capital expenses

High economies of scale

Launch globally in minutes

Focus on managing hardware infrastructure

Overprovision to ensure capacity

43 / 60

A company plans to migrate complex legacy systems to AWS. The company will use several operating
systems multiple databases and multiple programming languages. Which benefit of the AWS Cloud does
this scenario represent?

Scalability

Flexibility

Reliability

Security

44 / 60

Which AWS service will help a company plan a migration to AWS by collecting the configuration usage
and behavior data of on-premises data centers?

AWS Resource Groups

AWS Application Discovery Service

AWS Service Catalog

AWS Systems Manager

45 / 60

A company is running a Microsoft SOL Server instance on premises and is migrating its application to
AWS. The company lacks the resources needed to refactor the application but management wants to
reduce operational overhead as part of the migration.
Which database service would MOST effectively support these requirements?

Amazon DynamoDB

Amazon Redshift

Microsoft SQL Server on Amazon EC2

Amazon RDS for SQL Server

46 / 60

Which AWS service or feature will search for and identify AWS resources that are stared externally?

Amazon OpenSearch Service (Amazon Elasticsearch Service)

AWS Control Tower

AWS IAM Access Analyzer

AWS Fargate

47 / 60

A company puns to move its on-premises servers to Amazon EC2 instances. The company has 50
different business units and wants to separate each billing lot each unit. What should a cloud
practitioner recommend?

Use separate AWS accounts for each business unit men filter by unit using the coverage report

Place each business unit in a different AWS Region then filter by unit in Cost Explorer.

Tag each business unit’s resources then filter by unit in Cost Explorer

Use a Afferent VPC for each business unit then Mar by unit using an AWS Cost and Usage Report

48 / 60

A company needs to use thud-party software for its workload on AWS.
Which AWS service or feature can the company use to purchase the software?

AWS Resource Access Manager

AWS Manager Services

AWS License Manager

AWS Marketplace

49 / 60

A company moves a workload to AWS lo run on Amazon EC2 instances. The company needs to run the
workload in the most cost-effective way.
What can the company do lo meet this requirement?

Use AWS Key Management Sen/ice (AWS KMS)

Use multiple AWS accounts and consolidated billing.

Use AWS CloudFormation to deploy the infrastructure.

Rightsize all the EC2 instances that are used in the deployment

50 / 60

A company is developing a new Node.js application. The application must have a scalabe NoSQL
database to meet increasing demand as the popularity of the application grown.
Which AWS services will meet the requirements for the database?

Amazon Aurora Serverless

Amazon ElastiCache

Amazon DynamocDB

Amazon Redshift

51 / 60

A company is hosting an application in the AWS Cloud. The company wants to verify that underlying
AWS services and general AWS infrastructure are operating normally.
Which combination of AWS services can the company use to gather the required information? (Select
TWO).

AWS Personal Health Dashboard.

AWS System Manager

AWS trusted Advisor

AWS Service Health Dashboard

AWS Service Catalog

52 / 60

Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

Users can implement all AWS services in seconds.

AWS assumes all responsibility for the security of infrastructure and applications.

Users experience increased speed and agility.

Users benefits from massive economies of scale.

Users can more hardware from their data center to the AWS Cloud.

53 / 60

A company wants to deploy, scale, and manage third-party virtual appliances in a cluster in the AWS
Cloud. These applications include firewalls, intrusion detection and prevention systems, and deep
packet inspection systems.
Which AWS service or resource will meet these requirements?

Application Load Balancer

Gateway Load Balancer

Network Load Balancer

AWS Global Accelerator

https://docs.aws.amazon.com/prescriptive-guidance/latest/integrate-third-party-services/resources.html

54 / 60

A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to
automatically recover unhealthy applications that run on Amazon EC2 instances.
Which pillar of the AWS Well-Architected Framework does this action cover?

Security

Performance efficiency

Operational excellence

Reliability

55 / 60

A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed
reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket.
Which AWS tool will meet these requirements?

AWS Cost and Usage Reports

AWS Pricing Calculator

Cost Explorer

AWS Budgets

56 / 60

A company recently created its first AWS account.
Which AWS services will require the use of a VPC? (Select TWO.)

Amazon S3

Amazon Elastic File System (Amazon EFS)

Amazon Cognito

Amazon DynamoDB

Amazon EC2

57 / 60

A company distributes traffic evenly among a fleet of Amazon EC2 instances. The EC2 instances must
accommodate unpredictable increases in traffic.
Which benefit does the AWS Cloud provide to meet this requirement?

Scalability

Resilience

Security

Agility

58 / 60

Which benefit of cloud computing gives a company the ability to deploy applications to users all over the
world through a network of AWS Regions, Availability Zones, and edge locations?

Economy of scale

Global reach

Agility

High availability

59 / 60

A company is designing an application. For the data persistence layer, the company wants to use a

NoSQL database. Which AWS service should the company use for the database?

Amazon Redshift

AWS DataSync

Amazon Athena

Amazon DynamoDB

60 / 60

Which duty is a responsibility of AWS under the AWS shared responsibility model?

Identity and access management

Server-side encryption (SSE)

Firewall configuration

Maintaining physical hardware

Please fill the below Information to start the practice exam 👍

कृपया नीचे दी गई जानकारी भरें 🙌

Your score is

LinkedIn Facebook Twitter VKontakte

Exit