Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1131:

  A company chooses an Amazon EC2 instance type that fits its usage requirements Which principle of the AWS Well-Architected Framework is the company following?

  A. Proactively monitor costs

  B. Rightsize the infrastructure

  C. Supply resources dynamically.

  D. Decommission unused resources

  Correct Answer: B

• Question 1132:

  Which AWS service provides managed DDoS protection?

  A. AWS Firewall Manager

  B. AWS Shield

  C. Amazon GuardDuty

  D. Amazon Inspector

  Correct Answer: B

• Question 1133:

  A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic. Which AWS service can the company use to meet this goal?

  A. AWS WAF

  B. AWS Shield

  C. Amazon VPC

  D. AWS Certificate Manager (ACM)

  Correct Answer: D

  WS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources. SSL/TLS certificates are used to secure network communications and establish the identity of websites over the Internet as well as resources on private networks. AWS Certificate Manager removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates. With AWS Certificate Manager, you can quickly request a certificate, deploy it on ACM- integrated AWS resources, such as Elastic Load Balancers, Amazon CloudFront distributions, and APIs on API Gateway, and let AWS Certificate Manager handle certificate renewals. It also enables you to create private certificates for your internal resources and manage the certificate lifecycle centrally. Public and private certificates provisioned through AWS Certificate Manager for use with ACM-integrated services are free. You pay only for the AWS resources you create to run your application. With AWS Certificate Manager Private Certificate Authority, you pay monthly for the operation of the private CA and for the private certificates you issue.

• Question 1134:

  Which AWS services or features help protect Amazon EC2 instances from DDoS attacks by limiting network access to the instances? (Select TWO.)

  A. Network ACLs

  B. AWS Batch

  C. Security groups

  D. AWS Identity and Access Management (IAM)

  E. AWS CloudHSM

  Correct Answer: AC

• Question 1135:

  A company wants optimized pricing for its Amazon EC2 instances. The applications running on these instances cannot tolerate interruptions, and the workloads must remain in operation for at least 1 year.

  Which purchasing options should the company use to meet these requirements? (Select TWO.)

  A. Reserved Instances

  B. Spot Instances

  C. AWS Marketplace subscriptions

  D. Savings Plans

  E. Dedicated Hosts

  Correct Answer: AC

• Question 1136:

  Which statement describes a characteristic of the AWS global infrastructure?

  A. Edge locations contain multiple AWS Regions

  B. AWS Regions contain multiple Regional edge caches

  C. Availability Zones contain multiple data centers

  D. Each data center contains multiple edge locations

  Correct Answer: C

• Question 1137:

  Which IPv4 internet address for Amazon EC2 instances is billed at an hourly rate?

  A. A dynamic IP address that is requested in excess of the Regional limit for each account

  B. An Elastic IP address that is associated with an EC2 instance that is running

  C. An Elastic IP address that is not associated with an EC2 instance that is running

  D. A bring your own IP address (BYOIP) that is assigned to an EC2 instance that is running

  Correct Answer: C

• Question 1138:

  A company has set up its first VPC in the AWS Cloud the VPC includes two public subnets. The company needs to block access to all network traffic that destined for one of the two public subnets if the traffic is from a specific IP address that has identified as malicious.

  Which AWS service or tool can the company use to meet this requirement?

  A. Network ACL

  B. AWS WAF

  C. VPC route table entry

  D. Security group

  Correct Answer: A

• Question 1139:

  Which AWS feature grants temporary access to specific AWS resources?

  A. AWS IAM Access Analyzer

  B. Service control policies (SCPs)

  C. Access control lists (ACLs)

  D. IAM roles

  Correct Answer: A

• Question 1140:

  Which AWS service provides domain registration, DNS routing, and service health checks?

  A. AWS Direct Connect

  B. Amazon Route 53

  C. Amazon CloudFront

  D. Amazon API Gateway

  Correct Answer: B