Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1021:

  According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

  A. Hard code an IAM user's secret key and access key directly in the application, and upload the file.

  B. Store the IAM user's secret key and access key in a text file on the EC2 Instance, read the keys, then upload the file.

  C. Have the EC2 instance assume a role to obtain the privileges to upload the file.

  D. Modify the S3 bucket policy so that any service can upload to it at any time.

  Correct Answer: C

• Question 1022:

  Which tasks require use of the AWS account root user? (Select TWO.)

  A. Changing an AWS Support plan

  B. Modifying an Amazon EC2 instance type

  C. Grouping resources in AWS Systems Manager

  D. Running applications in Amazon Elastic Kubernetes Service (Amazon EKS)

  E. Closing an AWS account

  Correct Answer: AE

  Reference: https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.html

• Question 1023:

  A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice. Which benefit of the AWS Cloud describes these abilities?

  A. Reliability

  B. Economy of scale

  C. Elasticity

  D. Pay-as-you-go pricing

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

• Question 1024:

  A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements?

  A. AWS Lambda

  B. Amazon RDS

  C. AWS Fargate

  D. Amazon Athena

  Correct Answer: C

  Reference: https://aws.amazon.com/ecs/?whats-new-cards.sort-by=item.additionalFields.postDateTimeandwhats-new-cards.sort-order=descandecs-blogs.sort-by=item.additionalFields.createdDateandecs-blogs.sort-order=desc

• Question 1025:

  A company needs access to cloud support engineers 24 hours a day. 7 days a week. What is the LEAST expensive AWS Support plan that meets this requirement?

  A. AWS Basic Support

  B. AWS Business Support

  C. AWS Developer Support

  D. AWS Enterprise Supportd

  Correct Answer: C

• Question 1026:

  A company wants to migrate its applications from on premises to the AWS Cloud. Which AWS sen/ice or feature can help automate the migration?

  A. AWS Data Exchange

  B. CloudEndure Migration

  C. AWS AppSync

  D. AWS CloudFormation

  Correct Answer: B

• Question 1027:

  Which AWS service can a company use to access compliance documentation and AWS agreements?

  A. AWS Security Hub

  B. AWS Identity and Access Management (IAM)

  C. AWS Artifact

  D. AWS Certificate Manager (ACM)

  Correct Answer: C

• Question 1028:

  A company is based in the us-east-1 Region and has a satellite office in the eu-west-2 Region. The company wants to use Amazon Workspaces to host its internal web portal and virtual desktops for employees. What should the company do to minimize latency and ensure the best possible performance for employees?

  A. Deploy the internal web portal and virtual desktops to us-east-1 only. Use an Amazon CloudFront distribution for the users in eu-west-2.

  B. Deploy the internal web portal to us-east-1 only. Deploy the virtual desktops to us-east-1 and eu-west-2.

  C. Deploy the internal web portal to us-east-1 and eu-west-2. Deploy the virtual desktops on network optimized Amazon EC2 instances to us-east-1 only.

  D. Deploy the internal web portal and virtual desktops to us-east-1 and eu-west-2.

  Correct Answer: B

• Question 1029:

  A company has only basic knowledge of AWS technologies.

  Which AWS service provides the SIMPLEST way for the company to establish a website on AWS?

  A. Amazon Elastic File System (Amazon EFS)

  B. AWS Elastic Beanstalk

  C. AWS Lambda

  D. Amazon Lightsail

  Correct Answer: B

• Question 1030:

  A company wants to establish a private network connection between AWS and its corporate network. Which AWS service or feature will meet this requirement?

  A. Amazon Connect

  B. Amazon Route 53

  C. AWS Direct Connect

  D. VPC peering

  Correct Answer: C

  Reference: https://aws.amazon.com/blogs/aws/user-network-to-amazon-vpc-connectivity-for-applications-hosted-on-aws/