Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1061:

  A company is running a web application that is using Amazon Cognito for authentication The company does not want to use multi-factor authentication (MFA) for all the visitors every time, but the company's security team has concerns about compromised credentials The development team needs to configure mandatory MFA only when suspicious sign in attempts are detected.

  Which Amazon Cognito feature will meet these requirements?

  A. Short message service (SMS) text message MFA
  B. Advanced security metrics
  C. Time-based one-time password (TOTP) software token MFA
  D. Adaptive authentication
  D. Adaptive authentication

• Question 1062:

  A developer is receiving kttp 400 : ThrorclingExceprion errors intermittently when calling the Amazon CloudWatch API. When a call (ails, no data is retrieved. What best practice should first be applied to address this issue?

  A. Contact AWS Support for a limit increase.
  B. Use the AWS CLI to get the metrics
  C. Analyze the applications and remove the API call
  D. Retry the call with exponential backoff
  D. Retry the call with exponential backoff

• Question 1063:

  A company needs to monitor and forecast AWS costs and usage. The company also must set event-driven alert notifications that occur if spending limits are exceeded. Which AWS service or tool should the company use to meet these requirements?

  A. AWS Budgets
  B. Amazon CloudWatch
  C. AWS Config
  D. AWS Service Catalog
  A. AWS Budgets

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/aws-cost-management/aws-budgets/

• Question 1064:

  A social media company allows its public users to upload video content to an Amazon S3 bucket. Some videos are popular and are accessed often. some videos are popular and are accessed often. some videos are accessed infrequently. The company wants to reduce its total storage cost.

  Which actions will provide the MOST cost savings? (Select TWO.)

  A. Run S3 Transfer Acceleration for the S3 bucket.
  B. Ensure that the S3 bucket is in the most cost-effective AWS Region.
  C. Deactivate the default encryption for the S3 bucket.
  D. Use the S3 Intelligent-Tiering storage class.
  E. Use AWS DataSync to transfer files to the S3 bucket.
  B. Ensure that the S3 bucket is in the most cost-effective AWS Region.
  D. Use the S3 Intelligent-Tiering storage class.

• Question 1065:

  Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses?

  A. Spot Instances
  B. Reserved Instances
  C. Dedicated Hosts
  D. On-Demand Instances
  C. Dedicated Hosts

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/ec2/pricing/

• Question 1066:

  Which AWS service can send an alert when personally identifiable information (PII) is stored within an Amazon S3 bucket?

  A. Amazon GuardDuty
  B. Amazon Macie
  C. Amazon Inspector
  D. AWS Trusted Advisor
  B. Amazon Macie

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/macie/#:~:text=Macie%20automatically%20detects%20a%20large,addresses%2C%20and%20credit%20card%20numbers.

• Question 1067:

  Which AWS services or features help decrease network latency for a globally dispersed user base? ( Select TWO.)

  A. Amazon VPC
  B. Elastic Load Balancer
  C. Amazon CloudFront
  D. AWS Direct Connect
  E. AWS Global Accelerator
  C. Amazon CloudFront
  E. AWS Global Accelerator

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/startups/optimizing-latency-and-bandwidth-for-aws-traffic/

• Question 1068:

  A developer is writing an application to analyze the traffic to a fleet of Amazon EC2 instances. The EC2 instances run behind a public Application Load Balancer (ALB) An HTTP server runs on each of the EC2 instances, logging all requests

  to a log file.

  The developer wants to capture the client public IP addresses. The developer analyzes the log files and notices only the IP address of the ALB.

  What must the developer do to capture the client public IP addresses in the log file?

  A. Add a Host header to the HTTP server log configuration file.
  B. Install the Amazon CloudWatch Logs agent on each EC2 instance Configure the agent to write to the log file
  C. Install the AWS X-Ray daemon on each EC2 instance. Configure the daemon to write to the log file
  D. Add an X-Forwarded-For header to the HTTP server log configuration file
  D. Add an X-Forwarded-For header to the HTTP server log configuration file

• Question 1069:

  What is a benefit of using AWS serverless computing?

  A. Application deployment and management are not required
  B. Application security will be fully managed by AWS
  C. Monitoring and logging are not needed
  D. Management of infrastructure is offloaded to AWS
  D. Management of infrastructure is offloaded to AWS

  ---

  Explanation/Reference:

  Serverless computing allows you to build and run applications and services without thinking about servers. With serverless computing, your application still runs on servers, but all the server management is done by AWS.

• Question 1070:

  What is an AWS responsibility under the AWS shared responsibility model?

  A. configure the security group rules that determine which ports are open on an Amazon EC2 Linux instance.
  B. Ensure the security of the internal network in the AWS data centers.
  C. Patch the guest operating system with the latest security patches on Amazon EC2.
  D. Turn on server-side encryption for Amazon S3 buckets.
  B. Ensure the security of the internal network in the AWS data centers.

  ---

  Explanation/Reference:

  Under the AWS shared responsibility model, an AWS responsibility is to ensure the security of the internal network in the AWS data centers (Option B).

  The AWS shared responsibility model defines the security responsibilities between AWS and the customer. AWS is responsible for the security of the underlying infrastructure, including the physical security of the data centers, the security of the network infrastructure, and the security of the hypervisor. The customer is responsible for the security of their applications and data in the cloud.