Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1171:

  An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks. Which AWS service will provide this information?

  A. AWS Artifact
  B. AWS Trusted Advisor
  C. Amazon GuardDuty
  D. AWS Certificate Manager (ACM)
  A. AWS Artifact

  ---

  Explanation/Reference:

  AWS Artifact is an AWS service that provides on-demand access to AWS compliance documentation and reports, including compliance with specific compliance frameworks such as PCI DSS, HIPAA, and SOC. AWS customers can use AWS Artifact to download audit reports and other compliance-related documents that are relevant to their AWS resources and workloads.

• Question 1172:

  Which AWS database service providers in-memory data storage?

  A. Amazon DynamoDB
  B. Amazon ElastiCache
  C. Amazon RDS
  D. Amazon Timestream
  B. Amazon ElastiCache

  ---

  Explanation/Reference:

  Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store or cache in the cloud.

  Ref link: https://aws.amazon.com/nosql/in-memory/#:~:text=Amazon%20ElastiCache%20for% 20Memcachedandtext=ElastiCache%20for%20Memcached%20is%20fully,Tech%2C%20and%20E% 2DCommerce.

• Question 1173:

  Which feature of AWS Auto Scaling will forecast future traffic to schedule changes in the number of Amazon EC2 instances at the appropriate times?

  A. Scheduled scaling
  B. Predictive scaling
  C. Target tracking scaling
  D. Step scaling
  A. Scheduled scaling

• Question 1174:

  What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Choose two.)

  A. AWS automatically distributes the data globally for higher durability.
  B. AWS will take care of operating the application.
  C. AWS makes it easy to architect for high availability.
  D. AWS can easily accommodate application demand changes.
  E. AWS takes care application security patching.
  C. AWS makes it easy to architect for high availability.
  D. AWS can easily accommodate application demand changes.

• Question 1175:

  A company needs to schedule the rotation of database credentials in the AWS Cloud.

  Which AWS service should the company use to perform this task?

  A. AWS Identity and Access Management (IAM)
  B. AWS Managed Services (AMS)
  C. Amazon RDS
  D. AWS Secrets Manager
  D. AWS Secrets Manager

  ---

  Explanation/Reference:

  AWS Secrets Manager makes it easier to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. The key features of this service include the ability to:

  1.

  Secure and manage secrets centrally. You can store, view, and manage all your secrets centrally. By default, Secrets Manager encrypts these secrets with encryption keys that you own and control. You can use fine-grained IAM policies or resource-based policies to control access to your secrets. You can also tag secrets to help you discover, organize, and control access to secrets used throughout your organization.

  2.

  Rotate secrets safely. You can configure Secrets Manager to rotate secrets automatically without disrupting your applications. Secrets Manager offers built-in integrations for rotating credentials for all Amazon RDS databases (MySQL,

  PostgreSQL, Oracle, Microsoft SQL Server, MariaDB, and Amazon Aurora.) You can also extend Secrets Manager to meet your custom rotation requirements by creating an AWS Lambda function to rotate other types of secrets.

  3.

  Transmit securely. Secrets are transmitted securely over Transport Layer Security (TLS) protocol 1.2. You can also use Secrets Manager with Amazon Virtual Private Cloud (Amazon VPC) endpoints powered by AWS Privatelink to keep

  this communication within the AWS network and help meet your compliance and regulatory requirements to limit public internet connectivity.

  4.

  Pay as you go. Pay for the secrets you store in Secrets Manager and for the use of these secrets; there are no long-term contracts, licensing fees, or infrastructure and personnel costs. For example, a typical production-scale web

  application will generate an estimated monthly bill of $6. If you follow along the instructions in this blog post, your estimated monthly bill for Secrets Manager will be $1. Note: you may incur additional charges for using Amazon RDS and

  Amazon Lambda, if you've already consumed the free tier for these services.

  Now that you're familiar with Secrets Manager features, I'll show you how to store and automatically rotate credentials for an Oracle database hosted on Amazon RDS. I divided these instructions into three phases:

  1.

  Phase 1: Store and configure rotation for the superuser credential

  2.

  Phase 2: Store and configure rotation for the application credential

  3.

  Phase 3: Retrieve the credential from Secrets Manager programmatically

• Question 1176:

  How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.)

  A. It identifies software vulnerabilities in applications running on AWS
  B. It provides a list of cost optimization recommendations based on current AWS usage
  C. It detects potential security vulnerabilities caused by permissions settings on account resources
  D. It automatically corrects potential security issues caused by permissions settings on account resources
  E. It provides proactive alerting whenever an Amazon EC2 instance has been compromised
  B. It provides a list of cost optimization recommendations based on current AWS usage
  C. It detects potential security vulnerabilities caused by permissions settings on account resources

• Question 1177:

  Which of the following security-related actions are available at no cost?

  A. Calling AWS Support
  B. Contacting AWS Professional Services to request a workshop
  C. Accessing forums, blogs, and whitepapers
  D. Attending AWS classes at a local university
  C. Accessing forums, blogs, and whitepapers

• Question 1178:

  Which AWS service is used to host static websites?

  A. Amazon S3
  B. Amazon Elastic Block Store (Amazon EBS)
  C. AWS CloudFormation
  D. Amazon Elastic File System (Amazon EFS)
  A. Amazon S3

  ---

  Explanation/Reference:

  S3 = Secure, durable, and scalable object storage infrastructure. S3 can be used to host static websites to deliver HTML, JavaScript, images, and video for sites that do not contain server-side scripting.

• Question 1179:

  A global company wants to use a managed security service for protection from SQL injection attacks. The service also must provide detailed logging information about access to the company's ecommerce applications.

  Which AWS service will meet these requirements?

  A. AWS Network Firewall
  B. Amazon RDS for SQL Server
  C. Amazon GuardDuty
  D. AWS WAF
  D. AWS WAF

• Question 1180:

  An application that runs on Amazon EC2 needs to accommodate a flexible workload that can run or terminate at any time of day. Which pricing model will accommodate these requirements at the LOWEST cost?

  A. Spot Instances
  B. Reserved Instances
  C. On-Demand Instances
  D. Dedicated Host
  A. Spot Instances