$0.00
Amazon CLF-C02 Dumps

Amazon CLF-C02 Exam Dumps

AWS Certified Cloud Practitioner

Total Questions : 881
Update Date : July 06, 2026
PDF + Test Engine
$65 $95
Test Engine
$55 $85
PDF Only
$45 $75



Last Week CLF-C02 Exam Results

256

Customers Passed Amazon CLF-C02 Exam

94%

Average Score In Real CLF-C02 Exam

97%

Questions came from our CLF-C02 dumps.



Choosing the Right Path for Your CLF-C02 Exam Preparation

Welcome to PassExamHub's comprehensive study guide for the AWS Certified Cloud Practitioner exam. Our CLF-C02 dumps is designed to equip you with the knowledge and resources you need to confidently prepare for and succeed in the CLF-C02 certification exam.

What Our Amazon CLF-C02 Study Material Offers

PassExamHub's CLF-C02 dumps PDF is carefully crafted to provide you with a comprehensive and effective learning experience. Our study material includes:

In-depth Content: Our study guide covers all the key concepts, topics, and skills you need to master for the CLF-C02 exam. Each topic is explained in a clear and concise manner, making it easy to understand even the most complex concepts.
Online Test Engine: Test your knowledge and build your confidence with a wide range of practice questions that simulate the actual exam format. Our test engine cover every exam objective and provide detailed explanations for both correct and incorrect answers.
Exam Strategies: Get valuable insights into exam-taking strategies, time management, and how to approach different types of questions.
Real-world Scenarios: Gain practical insights into applying your knowledge in real-world scenarios, ensuring you're well-prepared to tackle challenges in your professional career.

Why Choose PassExamHub?

Expertise: Our CLF-C02 exam questions answers are developed by experienced Amazon certified professionals who have a deep understanding of the exam objectives and industry best practices.
Comprehensive Coverage: We leave no stone unturned in covering every topic and skill that could appear on the CLF-C02 exam, ensuring you're fully prepared.
Engaging Learning: Our content is presented in a user-friendly and engaging format, making your study sessions enjoyable and effective.
Proven Success: Countless students have used our study materials to achieve their CLF-C02 certifications and advance their careers.
Start Your Journey Today!

Embark on your journey to AWS Certified Cloud Practitioner success with PassExamHub. Our study material is your trusted companion in preparing for the CLF-C02 exam and unlocking exciting career opportunities.


Related Exams


Amazon CLF-C02 Sample Question Answers

Question # 1

Which design principle aligns with performance efficiency pillar of the AWS WellArchitected Framework? 

A. Using serverless architectures 
B. Scaling horizontally 
C. Measuring the cost of workloads 
D. Using managed services 



Question # 2

A company migrated to the AWS Cloud. Now the company pays for services on an asneeded basis. Which advantage of cloud computing is the company benefiting from? 

A. Stop spending money running and maintaining data centers 
B. Increase speed and agility 
C. Go global in minutes 
D. Trade fixed expense for variable expense 



Question # 3

A company is moving some of its on-premises IT services to the AWS Cloud. The finance department wants to see the entire bill so it can forecast spending limits. Which AWS service can the company use to set spending limits and receive notifications if those limits are exceeded? 

A. AWS Cost and Usage Reports 
B. AWS Budgets 
C. AWS Organizations consolidated billing 
D. Cost Explorer 



Question # 4

A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements? 

A. AWS CloudFormation 
B. AWS Directory Service 
C. Amazon Lightsail 
D. AWS CodeDeploy 



Question # 5

A company's IT administrator needs to configure the AWS CLI for programmatic access to AWS services for the company's employees. Which combination of credential components must the IT administrator use to meet this requirement? (Select TWO.) 

A. A public key 
B. A secret access key 
C. An IAM role 
D. An access key ID 
E. A private key 



Question # 6

A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance state changes to RUNNING. Which AWS service can the company use to meet this requirement? 

A. Amazon SageMaker 
B. Amazon Connect 
C. Amazon EventBridge 
D. AWS Fargate 



Question # 7

Which AWS service provides on-premises applications with low-latency access to data that is stored in the AWS Cloud? 

A. Amazon CloudFront 
B. AWS Storage Gateway 
C. AWS Backup 
D. AWS DataSync 



Question # 8

A company wants to securely rehost databases to AWS with minimal downtime. Which AWS service will meet these requirements?

 A. AWS Database Migration Service (AWS DMS) 
B. AWS Snow Family 
C. AWSDataSync 
D. AWS Mainframe Modernization 



Question # 9

A company is building AWS architecture to deliver real-time data feeds from an onpremises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency. What should the company use to connect the application and the data center to meet these requirements?

 A. AWS Direct Connect 
B. Public internet 
C. AWS VPN 
D. Amazon Connect 



Question # 10

Which AWS service helps users plan and track their server and application inventory migration data to AWS?

 A. Amazon CloudWatch 
B. AWS DataSync 
C. AWS Migration Hub 
D. AWS Application Migration Service 



Question # 11

An ecommerce company plans to move its data center workload to the AWS Cloud to support highly dynamic usage patterns. Which benefits make the AWS Cloud cost-effective for the migration of this type of workload? (Select TWO.) 

A. Reliability 
B. Security 
C. Elasticity 
D. Pay-as-you-go resource pricing 
E. High availability 



Question # 12

A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads. Which benefit of the AWS Cloud does this scenario describe?

 A. Global deployment in minutes 
B. Cost savings 
C. Agility 
D. Elasticity



Question # 13

Which AWS service gives users the ability to deploy highly repeatable infrastructure configurations? 

A. AWS CloudFormation 
B. AWS CodeDeploy 
C. AWS CodeBuild 
D. AWS Systems Manager 



Question # 14

A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLl and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Select TWO) 

A. Create an 1AM user and provide AWS Management Console access only. 
B. Create an 1AM user and provide programmatic access only. 
C. Create an 1AM role and provide AWS Management Console access only. 
D. Create an 1AM policy with administrator access and attach it to the 1AM user. 
E. Create an 1AM policy with Amazon RDS access and attach it to the 1AM user. 



Question # 15

A company wants to automatically patch its Windows instances that are deployed on Amazon EC2. Which AWS service will meet these requirements? 

A. AWS Systems Manager 
B. AWS Organizations 
C. AWS Control Tower 
D. Elastic Load Balancing (ELB) 



Question # 16

A company is releasing a business-critical application. Before the release, the company needs strategic planning assistance from AWS. During the release, the company needs AWS infrastructure event management and real-time support. What should the company do to meet these requirement? 

A. Access AWS Trusted Advisor. 
B. Contact the AWS Partner Network (APN). 
C. Sign up for AWS Enterprise Support. 
D. Contact AWS Professional Services. 



Question # 17

Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on organizing an inventory of data products in a data catalog? 

A. Operations 
B. Governance 
C. Business 
D. Platform 



Question # 18

For which use case are Amazon EC2 On-Demand Instances MOST cost-effective? 

A. Compute-intensive video transcoding that can be restarted it necessary 
B. An instance in continual use for 1 month to conduct quality assurance tests 
C. An instance that runs a web server that will run for 1 year 
D. An instance that runs a database that will run for 3 years 



Question # 19

A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS. Which AWS service should the company use to meet this requirement? 

A. AWS Lambda 
B. Amazon Route 53 
C. Amazon CloudFront 
D. AWS Direct Connect 



Question # 20

A company wants to test a new application. Which AWS principle will help the company test the application? 

A. Make long-term commitments in exchange for a cost discount. 
B. Scale up and down when needed without any long-term commitments. 
C. Have total control over the application infrastructure. 
D. Manage all of the maintenance tasks associated with the cloud. 



Question # 21

Which AWS service or tool provides users with a graphical interface that they can use to manage AWS services? 

A. AWS Copilot
 B. AWS CLI 
C. AWS Management Console 
D. AWS software development kits (SDKs) 



Question # 22

A company has a MariaDB database on premises. The company wants to move the data to the AWS Cloud. Which AWS service will host this database with the LEAST amount of operational overhead? 

A. Amazon RDS 
B. Amazon Neptune 
C. Amazon S3 
D. Amazon DynamoDB 



Question # 23

A company wants to develop applications that run on AWS. The company's developers need a set of libraries and development tools that are available in multiple programming languages. Which AWS solution provides these libraries and tools? 

A. AWS CodePipeline 
B. AWS SDKs 
C. Amazon CloudWatch 
D. AWS CodeDeploy 



Question # 24

Which AWS service can a company use to build conversational chatbots for customer service? 

A. Amazon Lex 
B. AWS Amplify
 C. Amazon Comprehend 
D. Amazon Polly 



Question # 25

Where can users find examples of AWS Cloud solution designs? 

A. AWS Marketplace 
B. AWS Service Catalog 
C. AWS Architecture Center 
D. AWS Trusted Advisor 



Question # 26

A company purchased Amazon EC2 Standard Reserved Instances (Rls) for a workload in the AWS Cloud. The company needs to move part of the workload to an instance family that does not match the instance family of these Standard RIs. How can the company take advantage of the Standard RIs that it no longer needs?  

A. Contact the AWS Support team, and ask the team to sell the Standard RIs. 
B. Sell the Standard RIs on the Amazon EC2 Reserved Instance Marketplace. 
C. Sell the Standard RIs as a third-party seller on the AWS Marketplace. 
D. Convert the Standard RIs to Savings Plans. 



Question # 27

A company wants to securely access an Amazon S3 bucket from an Amazon EC2 instance without accessing the internet. What should the company use to accomplish this goal? 

A. VPN connection
 B. Internet gateway 
C. VPC endpoint 
D. NAT gateway 



Question # 28

Which AWS service or tool can a company use to set up consolidated billing? 

A. AWS Billing and Cost Management console 
B. AWS Organizations 
C. AWS Cost and Usage Report 
D. AWS Systems Manager 



Question # 29

Which design principle is related to the reliability pillar according to the AWS WellArchitected Framework? 

A. Test recovery procedures 
B. Experiment more often 
C. Go global in minutes 
D. Analyze and attribute to expenditure 



Question # 30

A company wants to use AWS. The company has stringent requirements about low-latency access to on-premises systems and data residency. Which AWS service should the company use to design a solution that meets these requirements? 

A. AWS Wavelength 
B. AWS Transit Gateway
 C. AWS Ground Station 
D. AWS Outposts 



Question # 31

A company is running a reporting web server application on Amazon EC2 instances. The application runs once every week and once again at the end of the month. The EC2 instances can be shut down when they are not in use. What is the MOST cost-effective billing model for this use case? 

A. Standard Reserved Instances 
B. Convertible Reserved Instances 
C. On-Demand Capacity Reservations 
D. On-Demand Instances 



Question # 32

A company wants to avoid unnecessary charges and run workloads at the lowest price point. Which pillar of the AWS Well-Architected Framework includes these goals? 

A. Security 
B. Reliability 
C. Sustainability 
D. Cost optimization 



Question # 33

Which AWS service supports the deployment and management of applications in the AWS Cloud? 

A. Amazon CodeGuru 
B. AWS Fargate 
C. AWS CodeCommit 
D. AWS Elastic Beanstalk 



Question # 34

A company is learning about its responsibilities that are related to the management of Amazon EC2 instances. Which tasks for EC2 instances are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.) 

A. Install and patch the machine hypervisor. 
B. Patch the guest operating system. 
C. Encrypt data at rest on associated storage. 
D. Install the physical hardware and cabling. 
E. Provide physical security for the EC2 instances. 



Question # 35

A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic. Which AWS service can the company use to meet this goal? 

A. AWS WAF 
B. AWS Shield 
C. Amazon VPC 
D. AWS Certificate Manager (ACM) 



Question # 36

A company wants a report that lists the status of multi-factor authentication (MFA) devices that all users in the company's AWS account use. Which AWS feature or service will meet this requirement? 

A. AWS Cost and Usage Reports 
B. IAM credential reports 
C. Detailed Billing Reports 
D. AWS Cost Explorer reports 



Question # 37

A company needs to establish a dedicated network connection from on premises to AWS. The connection must provide consistent, low-latency network performance. Which AWS service should the company use to meet this requirement? 

A. AWS Direct Connect 
B. AWS Site-to-Site VPN 
C. AWS Directory Service 
D. AWS Transit Gateway 



Question # 38

Which task can an IAM user perform without AWS account root user credentials? 

A. Change to a different AWS Support plan. 
B. Close an AWS account. 
C. View the AWS Billing console. 
D. Activate access to the AWS Billing console. 



Question # 39

Which AWS tool or feature acts as a VPC firewall at the subnet level? 

A. Security group 
B. Network ACL 
C. Traffic Mirroring 
D. Internet gateway 



Question # 40

What is a benefit of using an Elastic Load Balancing (ELB) load balancer with applications running in the AWS Cloud? 

A. An ELB will automatically scale resources to meet capacity needs.  
B. An ELB can balance traffic across multiple compute resources. 
C. An ELB can span multiple AWS Regions. 
D. An ELB can balance traffic between multiple internet gateways. 



Question # 41

Which AWS service or feature can a company use to create a private, secured, and scalable network environment in the AWS Cloud? 

A. Amazon Elastic Container Service (Amazon ECS) 
B. Amazon S3 
C. Amazon VPC 
D. Route tables 



Question # 42

Which AWS service is a fully managed NoSQL database service? 

A. Amazon RDS 
B. Amazon Redshift 
C. Amazon DynamoDB 
D. Amazon Aurora 



Question # 43

Which AWS service provides a scalable data warehouse solution? 

A. Amazon S3
 B. Amazon DynamoDB 
C. Amazon Kinesis Data Streams 
D. Amazon Redshift 



Question # 44

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Select TWO.) 

A. They are stateless. 
B. They are stateful. 
C. They evaluate all rules before allowing traffic. 
D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. 
E. They operate at the instance level. 



Question # 45

Which AWS service can a company use to directly query and analyze AWS Cost and Usage Reports? 

A. Amazon OpenSearch Service
 B. Amazon Athena 
C. Amazon Aurora 
D. AWS Glue 



Question # 46

A company is creating a web application that requires a relational database to store customer data. Which AWS service should the company use to host the database? 

A. Amazon Aurora 
B. Amazon DynamoDB 
C. Amazon ElastiCache 
D. Amazon Redshift 



Question # 47

Which AWS service can create a private network connection from on premises to the AWS Cloud? 

A. AWS Config 
B. Virtual Private Cloud (Amazon VPC) 
C. AWS Direct Connect 
D. Amazon Route 53 



Question # 48

Which of the following AWS services are serverless? (Select TWO.) 

A. AWS Outposts 
B. Amazon EC2 
C. Amazon Elastic Kubernetes Service (Amazon EKS) 
D. AWS Fargate 
E. AWS Lambda 



Question # 49

A company needs a hybrid cloud storage service to connect its on-premises environment to scalable AWS Cloud storage. Which AWS service will meet these requirements? 

A. Amazon S3
 B. Amazon FSx 
C. AWS Storage Gateway 
D. AWS Fargate 



Question # 50

A company is building a business intelligence solution that uses Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it. Which service should the company use? 

A. Amazon CloudWatch 
B. AWS Health Dashboard 
C. AWS Service Catalog 
D. Amazon QuickSight 



Question # 51

Which action should a company take to improve security in its AWS account? 

A. Require multi-factor authentication (MFA) for privileged users. 
B. Remove the root user account. 
C. Create an access key for the AWS account root user. 
D. Create an access key for each privileged user. 



Question # 52

Which AWS service allows users to model and provision AWS resources using common programming languages? 

A. AWS CloudFormation 
B. AWS CodePipeline 
C. AWS Cloud Development Kit (AWS CDK) 
D. AWS Systems Manager 



Question # 53

A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console. Which AWS service or resource will meet this requirement? 

A. S3 Multi-Region Access Points 
B. S3 Storage Lens 
C. AWS IAM Identity Center
 D. Access Analyzer for S3 



Question # 54

A company needs to reserve a certain amount of Amazon EC2 compute resources in a specific Availability Zone within an AWS Region. Which purchasing option should the company use to meet this requirement? 

A. EC2 Instance Savings Plans 
B. Compute Savings Plans 
C. Regional Reserved Instances 
D. Zonal Reserved Instances 



Question # 55

A company is running a key-value NoSQL workload on Amazon EC2 instances. The company needs the workload to have scalability, failover protection, and backup capabilities. What is the MOST operationally efficient way to meet these requirements? 

A. Add additional EC2 instances to the database cluster.
 B. Run an identical copy of the database in a second Availability Zone. 
C. Migrate the database to Amazon DynamoDB. 
D. Migrate the database to a relational database. 



Question # 56

A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS). Where can the company find this documentation? 

A. AWS Artifact 
B. AWS Organizations 
C. AWS Trusted Advisor 
D. AWS Support Center 



Question # 57

A company wants to migrate its on-premises SQL Server database to the AWS Cloud. The company wants AWS to handle the day-to-day administration of the database. Which AWS service will meet the company's requirements? 

A. Amazon EC2 foe Microsoft SQL Server 
B. Amazon DynamoDB 
C. Amazon RDS 
D. Amazon Aurora 



Question # 58

Which options are benefits of using third-party software from AWS Marketplace? (Select TWO.) 

A. The software's data encryption is managed by a third-party vendor. 
B. The software has been evaluated by vendors to ensure that it will run on AWS. 
C. Users do not need to upgrade to newer software versions. 
D. Users do not need to conduct security testing on the software. 
E. Users can launch preconfigured software in only a few steps. 



Question # 59

Which AWS services are serverless? (Select TWO.) 

A. AWS Fargate 
B. Amazon Managed Streaming for Apache Kafka 
C. Amazon EMR 
D. Amazon S3 
E. Amazon EC2 



Question # 60

Which AWS service provides storage-optimized and compute-optimized device configurations? 

A. AWS Snowcone 
B. AWS Storage Gateway 
C. AWS Snowball Edge 
D. AWS DataSync 



Question # 61

A developer needs to use a standardized template to create copies of a company's AWS architecture for development test, and production environments. Which AWS service should the developer use to meet this requirement? 

A. AWS Cloud Map 
B. AWS Cloud Formation 
C. Amazon CloudFront 
D. AWS CloudTrail 



Question # 62

A company wants to use an AWS networking solution that can act as a centralized gateway between multiple VPCs and on-premises networks. Which AWS service or feature will meet this requirement? 

A. Gateway VPC endpoint 
B. AWS Direct Connect 
C. AWS Transit Gateway 
D. AWS PrivateLink 



Question # 63

A company has an on-premises application. The application has processing times of less than 5 minutes and is invoked only a few times each day. The company wants to move the application to the AWS Cloud. Which AWS service will support this application MOST cost-effectively? 

A. Amazon Elastic Container Service (Amazon ECS) 
B. AWS Lambda 
C. Amazon Elastic Kubernetes Service (Amazon EKS) 
D. Amazon EC2  



Question # 64

Treating infrastructure as code in the AWS Cloud allows users to: 

A. automate migration of on-premises hardware to AWS data centers. 
B. let a third party automate an audit of the AWS infrastructure. 
C. turn over application code to AWS so it can run on the AWS infrastructure. 
D. automate the infrastructure provisioning process.



Question # 65

A company is building a web application using AWS. Which AWS service will help prevent network layer DDoS attacks against the web application? 

A. AWS WAF 
B. AWS Firewall Manager 
C. Amazon GuardDuty 
D. AWS Shield 



Question # 66

A company wants to rightsize its Amazon EC2 instances. Which configuration change will meet this requirement with the LEAST operational overhead? 

A. Add EC2 instances in another Availability Zone. 
B. Change the size and type of the EC2 instances based on utilization. 
C. Convert the payment method from On-Demand to Savings Plans. 
D. Reprovision the EC2 instances with a larger instance type. 



Question # 67

A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations. Which AWS service should the company use to meet this requirement? 

A. Amazon VPC 
B. Amazon GuardDuty 
C. Amazon Cognito 
D. AWS IAM Identity Center 



Question # 68

Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model? 

A. Configuration of Amazon EC2 instance operating systems 
B. Application file system server-side encryption 
C. Patch management 
D. Security of the physical infrastructure 



Question # 69

Which AWS service gives companies the ability to create graph applications that can analyze billions of relationships between data points in milliseconds? 

A. Amazon Redshift 
B. Amazon Neptune 
C. Amazon DocumentDB (with MongoDB compatibility) 
D. Amazon ElastiCache 



Question # 70

A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships. Which AWS service can the company use to meet this requirement?

A. AWS Direct Connect 
B. AWS Transit Gateway 
C. Amazon Connect 
D. Amazon Route 53 



Question # 71

A company plans to perform a one-time migration of a large dataset with millions of files from its on-premises data center to the AWS Cloud. Which AWS service should the company use for the migration? 

A. AWS Database Migration Service (AWS DMS) 
B. AWS DataSync 
C. AWS Migration Hub 
D. AWS Application Migration Service 



Question # 72

Which AWS services can host PostgreSQL databases? (Select TWO.) 

A. Amazon S3 
B. Amazon Aurora
C. Amazon EC2 
D. Amazon OpenSearch Service 
E. Amazon Elastic File System (Amazon EFS) 



Question # 73

Which AWS service uses edge locations to cache content? 

A. Amazon Kinesis
 B. Amazon Simple Queue Service (Amazon SQS) 
C. Amazon CloudFront 
D. Amazon Route 53 



Question # 74

A company has a client that uses an Amazon RDS database. The client requests Information about operating system-level upgrades on the AWS resources that host the RDS database. The company employs a third-party provider to monitor the RDS database. Who is responsible for upgrading the operating systems for Amazon RDS under the AWS shared responsibility model?

A. The client 
B. The company
 C. AWS 
D. The third-party provider 



Question # 75

Which design principles are included in the reliability pillar of the AWS Well-Architected Framework? (Select TWO.) 

A. Automatically recover from failure. 
B. Grant everyone access to increase AWS service quotas. 
C. Stop guessing capacity. 
D. Design applications to run in a single Availability Zone. 
E. Plan to increase AWS service quotas first in a secondary AWS Region. 



Question # 76

A company wants to visualize and manage AWS Cloud costs and usage for a specific period of time. Which AWS service or feature will meet these requirements? 

A. Cost Explorer 
B. Consolidated billing 
C. AWS Organizations 
D. AWS Budgets 



Question # 77

Which AWS service should a company use to organize characterize, and search large numbers of images? 

A. Amazon Transcribe 
B. Amazon Rekognition 
C. Amazon Aurora 
D. Amazon QuickSight 



Question # 78

A company wants to log in securely to Linux Amazon EC2 instances. How can the company accomplish this goal?

A. Use SSH keys. 
B. Use a VPN. 
C. Use end-to-end encryption. 
D. Use Amazon Route 53. 



Question # 79

A user wants to invoke an AWS Lambda function when an Amazon EC2 instance enters the "stopping" state. Which AWS service is appropriate for this use case? 

A. Amazon EventBridge 
B. AWS Config 
C. Amazon Simple Notification Service (Amazon SNS) 
D. AWS CloudFormation 



Question # 80

A company is moving Us development and test environments to AWS to increase agility and reduce cost. Because these are not production workloads and the servers are not fully utilized, occasional unavailability is acceptable. What is the MOST cost-effective Amazon EC2 pricing model that will meet these requirements? 

A. Reserved instances 
B. On-Demand Instances 
C. Spot Instances 
D. Dedicated Hosts 



Question # 81

A company needs to create a portfolio that provides central management of approved IT services. Which AWS service offers this functionality? 

A. AWS Service Catalog 
B. AWS Control Tower 
C. AWS Cloud Map 
D. AWS Clean Rooms 



Question # 82

A company wants to centrally manage Its employee's access to multiple AWS accounts. Which AWS service or feature should the company use to meet this requirement?

A. AWS Identity and Access Management Access Analyzer 
B. AWS Secrets Manager C. AWS IAM Identity Center 
D. AWS Security Token Service (AWS STS) 



Question # 83

A company wants to automatically run operating system command scripts on Amazon EC2 instances. Which AWS service will meet these requirements in the MOST operationally efficient way? 

A. AWS Organizations 
B. AWS Control Tower 
C. AWS Lambda 
D. AWS Systems Manager 



Question # 84

Which AWS service or tool inspects a user's AWS environment and makes recommendations for cost savings and system performance improvements? 

A. Cost Explorer 
B. AWS Trusted Advisor 
C. Amazon Inspector 
D. AWS Budgets 



Question # 85

A company is running Amazon EC2 instances in a private subnet in a VPC. Which AWS service or feature can provide the EC2 instances with network connections to the internet?

A. Gateway endpoint 
B. NAT gateway 
C. Network Load Balancer 
D. Amazon Route 53 



Question # 86

A company wants to minimize network latency between its Amazon EC2 instances. The EC2 instances do not need to be highly available. Which solution meets these requirements?

 A. Use EC2 instances in a single Availability Zone. 
B. Use EC2 instances in multiple edge locations. 
C. Use EC2 instances in the same Availability Zone but in different AWS Regions. 
D. Use EC2 instances in the same edge location and the same AWS Region. 



Question # 87

A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances. The suspicious activity is coming from a single IP address. Which AWS service should the company use to block access from this IP address? 

A. AWS Shield 
B. AWS Config 
C. Amazon GuardDuty 
D. AWS WAF 



Question # 88

Which AWS service or feature can a company use to determine which business unit is using specific AWS resources? 

A. Cost allocation tags 
B. Key pairs 
C. Amazon Inspector 
D. AWS Trusted Advisor