Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1081:

  A company uses Amazon S3 buckets. One of the company's departments enabled S3 Cross-Region Replication for those buckets to meet new requirements. The company's bill for that month was larger than usual. Which AWS service or feature can the company use to confirm that the cost increase was caused by the data replication?

  A. Consolidated billing
  B. Cost Explorer
  C. AWS Pricing Calculator
  D. AWS Trusted Advisor
  B. Cost Explorer

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/aws-cost-management/aws-cost-explorer/

• Question 1082:

  A user has an AWS Business Support plan and requires detailed billing information. Which AWS resource will help?

  A. AWS Concierge Support
  B. AWS Service Catalog
  C. AWS Budgets
  D. AWS Cost and Usage Report
  A. AWS Concierge Support

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/faqs/

• Question 1083:

  Which AWS services support a hybrid compute architectural model? (Choose two.)

  A. Amazon Macie
  B. AWS Wavelength
  C. AWS Service Catalog
  D. AWS Outposts
  E. VMware Cloud on AWS
  D. AWS Outposts
  E. VMware Cloud on AWS

  ---

  Explanation/Reference:

  AWS Outposts (Option D) and VMware Cloud on AWS (Option E).

  AWS Outposts allows customers to run AWS services on-premises, providing a hybrid cloud solution. It allows customers to use the same APIs, control plane, and tools they use in the AWS cloud to run applications on-premises, using their own hardware.

  VMware Cloud on AWS provides a hybrid cloud solution that allows customers to run VMware workloads on AWS infrastructure. Customers can use the same VMware tools they use in their on-premises environments to manage workloads running in the AWS cloud.

• Question 1084:

  Which Amazon Virtual Private Cloud (Amazon VPC) feature enables users to connect two VPCs together?

  A. Amazon VPC endpoints
  B. Amazon Elastic Compute Cloud (Amazon EC2) ClassicLink
  C. Amazon VPC peering
  D. AWS Direct Connect
  C. Amazon VPC peering

  ---

  Explanation/Reference:

  A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses. Instances in either VPC can communicate with each other as if they are within the same network. You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account. The VPCs can be in different regions (also known as an inter-region VPC peering connection).

  Reference: https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html

• Question 1085:

  A company wants to be nodded when its AWS Cloud costs or usage exceed defined thresholds. Which AWS service will support these requirements?

  A. AWS Budgets
  B. Cost Explorer
  C. AWS CloudTrail
  D. Amazon Made
  A. AWS Budgets

• Question 1086:

  Which AWS service needs to be enabled to track all user account changes within the AWS Management Console?

  A. AWS CloudTrail
  B. Amazon Simple Notification Service (Amazon SNS)
  C. VPC Flow Logs
  D. AWS CloudHSM
  A. AWS CloudTrail

  ---

  Explanation/Reference:

  AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting. In addition, you can use CloudTrail to detect unusual activity in your AWS accounts. These capabilities help simplify operational analysis and troubleshooting.

  Reference: https://aws.amazon.com/cloudtrail/

• Question 1087:

  Which task is AWS responsible for in the shared responsibility model for security and compliance?

  A. Granting access to individuals and services
  B. Encrypting data in transit
  C. Updating Amazon EC2 host firmware
  D. Updating operating systems
  B. Encrypting data in transit

  ---

  Explanation/Reference:

  AWS Compliance enables customers to establish and operate in an AWS security control environment The shared responsibility model is part of AWS Compliance program The Security of the cloud is managed by Amazon AWS provider The Security in the cloud is responsibility of the customer The customer is responsible for their information and data, their secure transmission, integrity, and encryption Also, the customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2 AWS customers retain control and ownership of their data The AWS network provides significant protection against traditional network security issues and the customer can implement further protection

  Reference: https://www.whizlabs.com/blog/aws-security-shared-responsibility/

• Question 1088:

  Which duty is a responsibility of AWS under the AWS shared responsibility model?

  A. Identity and access management
  B. Server-side encryption (SSE)
  C. Firewall configuration
  D. Maintaining physical hardware
  D. Maintaining physical hardware

• Question 1089:

  Which AWS service will automatically identify and protect a user's sensitive data?

  A. Amazon GuardDuty
  B. Amazon Macie
  C. Amazon Cloud Watch
  D. Amazon Inspector
  B. Amazon Macie

• Question 1090:

  Which AWS Trusted Advisor feature is available exclusively to users with AWS Business Support or AWS Enterprise Support?

  A. Notification setup
  B. Refresh checks
  C. AWS Support API
  D. Action links
  C. AWS Support API

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/