Which design principle is achieved by following the reliability pillar of the AWS?

AWS Certified Cloud Practitioner Exam Questions that give you a first-hand idea of the type of CLF-C01 exam questions that may appear in the final certification exam.

AWS Certified Cloud Practitioner (CLF-C01) is the proper certification to begin your journey in the AWS cloud that helps you build your AWS Cloud knowledge by learning about AWS Cloud concepts, AWS services, security, architecture, pricing, and support.

The AWS Certified Cloud Practitioner examination(CLF-C01) is meant for people who have the knowledge and skills necessary to effectively demonstrate an overall understanding of the AWS Cloud, independent of specific technical roles addressed by other AWS Certifications. The exam can be taken at a testing centre or from the comfort and convenience of a home or office location as an online proctored exam.

AWS Certified Cloud Practitioner certification is the best place to start for anyone new to cloud computing. This will help you build the foundation you’ll need as you dive deeper into the inner workings of AWS.

The AWS Cloud Practitioner exam certification gives you a high-level introduction to AWS. It doesn’t go deep on any particular services. Instead, it provides a general overview of how AWS is structured.

If you are preparing for AWS Certified Cloud Practitioner Certification [CLF-C01] Exam. Then check your readiness by attending to these CLF-C01 Exam Questions.

Check Also: Free AWS Training and Certifications

Let’s Discuss the domain of the question wise:

AWS Certified Cloud Practitioner CLF-C01 Exam Questions

Domain 1: Cloud Concepts

Q1. Which of the two design principles below relates to the “Operational Excellence” pillar of the Well-Architected framework? (Choose 2)

A. Implement a strong identity foundation
B. Enable traceability
C. Anticipate Failure
D. Manage change in automation
E. Perform operations as code

Answer: C, E
Explanation: 

The operational excellence pillar of a well-architected framework has below 5 design principles.

  • Perform operations as code
  • Make frequent, small, reversible changes
  • Refine operations procedures frequently
  • Anticipate failure
  • Learn from all operational failures

The security pillar of a well-architected framework has below 7 design principles.

  • Implement a strong identity foundation
  • Enable traceability
  • Apply security at all layers
  • Automate security best practices
  • Protect data in transit and at rest
  • Keep people away from data
  • Prepare for security events

The reliability pillar of a well-architected framework has below 5 design principles.

  • Automatically recover from failure
  • Test recovery procedures
  • Scale horizontally to increase aggregate workload availability
  • Stop guessing capacity
  • Manage change in automation

Option A is INCORRECT Implement a strong identity foundation as the design principle relating to the security pillar.

Option B is INCORRECT. Enable traceability is the design principle relating to the security pillar.

option C is CORRECT

Option D is INCORRECT Manage change in automation is the design principle relating to the reliability pillar

Option E is CORRECT

Q2. What is the ability of AWS products and services to recover from disruptions and mitigate disruptions known as

A. Resiliency
B. Consistency
C. Durability
D. Latency

Answer: A
Explanation

Resiliency is the ability to recover from disruptions and mitigate disruptions.

Consistency involves more than one system storing information, to return the same result when queried.

Durability is the system’s ability to perform even upon the occurrence of unexpected events.

Latency is typically the measurement of delay between request and response.

Option A is CORRECT as Resilience is the ability of AWS products to recover from disruptions and mitigate disruptions.

Option B is INCORRECT because Consistency ensures that similar results are returned by more than one system storing information when queried.

Option C is INCORRECT because Durability is the ability of AWS product(s) to remain functional and perform despite unexpected events’ occurrence.

Option D is INCORRECT because latency denotes the delay between getting a response after a request is made.

Domain 2: Security & Compliance

Q1. Which of the below can be configured to enhance the security at the subnet level?

A. Virtual Private Cloud (VPC)
B. Configure transitive VPC peering
C. NACL (Network Access Control List)
D. Security Group

Answer: C
Explanation:

Option A is INCORRECT. Virtual Private Cloud (VPC) is a virtual network that lets us launch AWS resources in the denied virtual network.

Option B is INCORRECT. Configuring transitive VPC peering is invalid as this is not supported in AWS.

Option C is CORRECT. NACLs can be configured to enhance security at the subnet level.

Option D is INCORRECT. Security Group acts as a virtual firewall by controlling the traffic both inbound and outbound. A security group acts at the instance level.

Q2. To enable an application on an EC2 instance to perform some actions, the developer is required to grant access to the application for a few AWS resources. The developer plans to provide his credential to the instance. However, as the developer’s credentials are long-term, the developer is looking for an alternative to reduce the security risk.

What can the developer do in this scenario to temporarily enable applications on EC2 to get access to the required AWS resources?

A. Use “IAM Roles”
B. Use “IAM Group”
C. Use “IAM Tags”
D. There is no alternate way. A developer needs to give his credentials and revoke access when the required action is done.

Answer: A
Explanation:

Users could assume the role (IAM Users) and services (AWS services) for getting temporary security credentials. This can then be used to perform the required actions. IAM roles facilitate access delegation to services/users that do not have access to AWS resources of your organization.

An IAM group is a service to grant/revoke/manage permissions on a collection of IAM users. IAM tags add custom attributes to IAM users or roles. IAM tags use key-value pairs.

Option A is CORRECT as the IAM role can temporarily enable applications on EC2 to get access to the required AWS resources.

Option B is INCORRECT because the IAM group is a collects IAM Users and helps in access management.

Option C is INCORRECT because IAM tags are simply “labels” that add custom attributes to the users/roles.

Option D is INCORRECT because we can use IAM Roles in the scenario.

Domain 3: Technology

Q1. Which AWS service is a machine learning-based tool that analyzes metrics of historical utilization and makes recommendations of compute service(s) to be used for the workload?

A. AWS Outposts
B. AWS Well-Architected Tool
C. AWS Management Console
D. AWS Compute Optimizer

Answer: D
Explanation:

Option A is INCORRECT because AWS Outpost is a fully managed service that provides a seamless hybrid experience by facilitating the running of AWS services and infrastructure on-premises. AWS outpost does not provide recommendations for using the compute services after analyzing the past utilization metrics.

Option B is INCORRECT as AWS Well-Architected Tool is a tool that provides advice on architecting the workload in the cloud. This tool also enables customers to review their architecture against the best practices.

Option C is INCORRECT because AWS Management Console is a web-based user interface that helps users to access and manage all the aspects of all the available AWS services. This is a management and governance tool.

Option D is CORRECT. AWS Compute Optimizer is a machine learning-based tool that analyzes metrics of historical utilization and makes recommendations of compute service(s) to be used for the workload.

Q2. Which of the below could be used to perform best practices aligned deployment of popular technologies on AWS, and eventually reduce the time taken for environment build and eventual usage of the environment?

A. AWS Elastic Beanstalk
B. AWS OpsWorks
C. AWS Auto deploy
D. AWS Quick Starts

Answer: D
Explanation:

Option A is INCORRECT. AWS Elastic Beanstalk helps in web applications and services scaling and deployment. However, we need to provide the code.

Option B is INCORRECT. Aimed specifically for chef and puppet, AWS OpsWorks helps facilitate managed instances of Chef and Puppet.

Option C is INCORRECT. AWS Auto deploy is an Invalid service.

Option D is CORRECT. AWS Quick Starts: Built by AWS Architects and partners, quick start helps to automate deployments aligned with the best practice. CloudFormation templates are included along with Quick Start for the deployment automation.

Domain 4: Billing & Pricing

Q1. An organization has started a new project to create memes based on user comments and uploaded images. As this new project is started on a pilot basis and is not pursued vigorously, cost efficiency is emphasized, not uptime and processing time. Given these priorities, which EC2 Instance should be preferred?

A. On-Demand Instance
B. Spot Instance
C. Dedicated Instances
D. Scheduled Reserved Instances

Answer: B
Explanation:

Option A is INCORRECT. On-Demand Instances are costlier than spot instances.

Option B is CORRECT. Spot instances are the most cost-efficient option. Please note interruptions are stated to be not an issue.

Option C is INCORRECT. Dedicated Instances are instances that are dedicated to a single user. Dedicated instances are not suitable for these types of scenarios.

Option D is INCORRECT. Scheduled Reserved Instances will not be preferable over spot instances in this scenario because interruptions are stated to be not an issue. Nothing in this scenario states long-term requirements. Scheduled Reserved Instances require a long-term commitment.

Q2. Which S3 storage class is preferable for storing on-prem data backup (Secondary backup) copy?

A. S3 Standard
B. S3 Standard-Infrequent Access
C. S3 Intelligent-Tiering
D. S3 One Zone-Infrequent Access

Answer: D
Explanation:

S3 One Zone-Infrequent Access should be the preferable S3 storage class as other storage classes are costly options. In this scenario, the data is a secondary backup copy and hence shall be accessed infrequently. Data resilience is not mandatorily required since the data is a secondary backup copy.

Option A is INCORRECT. S3 Standard will not be preferred as this will be a costly option when the requirement could be fulfilled using S3 One Zone IA.

Option B is INCORRECT. S3 Standard-Infrequent Access will not be preferred as this will be a costly option when the requirement could be fulfilled by using S3 One Zone IA.

Option C is INCORRECT. S3 Intelligent-Tiering is incorrect. Because this is apt for data with changing patterns and here the pattern is not changing. This is also a costly option.

Option D is CORRECT.

Download the Complete CLF-C01 Exam Questions

When you have tested your knowledge by answering these CLF-C01 exam questions, I hope you have a clear stand in terms of your AWS Certified Cloud Practitioner Certification (CLF-C01) exam preparation.


Note: K21Academy also offers a complete CLF-C01 Exam Questions Prep Guide where learners get to practice questions to test their AWS Certified Cloud Practitioner Certification (CLF-C01) exam preparation before the actual exam.

To download the complete CLF-C01 Exam Questions guide click here.


If you feel you are lagging somewhere and you need to buckle up your preparation process, then you can enrol for the K21 Academy AWS Certified Cloud Practitioner Certification certification training course to clear the final exam successfully.

  • AWS Certificate Manager: Overview, Features and How it Works?
  • AWS Database Services – Amazon RDS, Aurora, DynamoDB, ElastiCache
  • AWS Certified Solutions Architect: Roles & Responsibilities
  • Amazon Kinesis Overview, Features And Benefits
  • AWS Route 53 Introduction
  • Amazon Elastic LoadBalancer 
  • Amazon RDS

Next Task For You

Begin your journey towards becoming an AWS Certified Cloud Practitioner by joining our FREE LIVE TRAINING on AWS Cloud Practitioner for Beginners.

Which design principle is achieved by following the reliability pillar of AWS?

Reliability Pillar The design principles within this pillar include using automation for recovery from failure, testing recovery procedures, scaling horizontally to increase workload availability, managing change in automation, and understanding capacity.

What are the design principles that increase reliability?

Reliability principles.
Define your reliability goals..
Build observability into your infrastructure and applications..
Design for scale and high availability..
Create reliable operational processes and tools..
Build efficient alerts..
Build a collaborative incident management process..

Which of the following are best practices for the reliability pillar?

The reliability pillar provides an overview of design principles, best practices, and questions..
Foundations..
Workload Architecture..
Change Management..
Failure Management..

Which of the following AWS services are part of the AWS Foundation services for the reliability pillar?

Reliability There are four best practice areas and tools for reliability in the cloud: Foundations – IAM, Amazon VPC, AWS Trusted Advisor, AWS Shield. Change Management – AWS CloudTrail, AWS Config, Auto Scaling, Amazon CloudWatch.