Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1141:

  Which AWS service gives users the ability to combine existing accounts into a centrally managed hierarchy?

  A. AWS Organizations
  B. AWS Identity and Access Management (IAM)
  C. AWS config
  D. Amazon Inspector
  A. AWS Organizations

• Question 1142:

  Which of the following Reserved Instance (RI) pricing models provides the highest average savings compared to On-Demand pricing?

  A. One-year, No Upfront, Standard RI pricing
  B. One-year, All Upfront, Convertible RI pricing
  C. Three-year, All Upfront, Standard RI pricing
  D. Three-year, No Upfront, Convertible RI pricing
  C. Three-year, All Upfront, Standard RI pricing

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/

• Question 1143:

  Which components are required to build a successful site-to-site VPN connection on AWS? (Select TWO.)

  A. Internet gateway
  B. NAT gateway
  C. Customer gateway
  D. Transit gateway
  E. Virtual private gateway
  C. Customer gateway
  D. Transit gateway

• Question 1144:

  A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?

  A. Security groups
  B. AWS WAF
  C. Network ACLs
  D. AWS Shield
  B. AWS WAF

• Question 1145:

  Which AWS service or feature is highly available by default?

  A. Amazon EC2
  B. Amazon Aurora
  C. NAT instances
  D. Amazon RDS
  D. Amazon RDS

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html

• Question 1146:

  A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.

  Which combination of AWS services should the company use to meet these requirements? (Choose two.)

  A. AWS Glue
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon Redshift
  D. Amazon QuickSight
  E. Amazon Quantum Ledger Database (Amazon QLDB)
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon Redshift

• Question 1147:

  Which AWS service or feature can be used to prevent SQL injection attacks?

  A. Security groups
  B. Network ACLs
  C. AWS WAF
  D. IAM policy
  C. AWS WAF

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-sql-conditions.html

• Question 1148:

  What is a customer responsibility under the AWS shared responsibility model when using AWS Lambda?

  A. Maintenance of the underlying Lambda hardware.
  B. Maintenance of the Lambda networking infrastructure.
  C. The code and libraries that run in the Lambda functions.
  D. The Lambda server software.
  C. The code and libraries that run in the Lambda functions.

• Question 1149:

  Which of the following security-related aspects of running an Amazon Elastic Compute Cloud (Amazon EC2) instance is the responsibility of AWS?

  A. Security of private keys
  B. Hypervisor software updates
  C. Security updates to software running on the instance
  D. Policies controlling instance access
  B. Hypervisor software updates

• Question 1150:

  A company wants to increase its ability to recover its infrastructure in the case of a natural disaster. Which pillar of the AWS Well-Architected Framework does this ability represent?

  A. Cost optimization
  B. Performance efficiency
  C. Reliability
  D. Security
  C. Reliability

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/wellarchitected-reliability-pillar.pdf