Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 111:

  A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications. Which AWS Support plan will meet these requirements at the LOWEST cost?

  A. AWS Basic Support

  B. AWS Developer Support

  C. AWS Business Support

  D. AWS Enterprise Support

  Correct Answer: B

  We recommend AWS Developer Support if you are testing or doing early development on AWS and want the ability to get technical support during business hours as well as general architectural guidance as you build and test. In addition to enhanced technical support and architectural guidance, Developer Support provides access to documentation and forums, AWS Trusted Advisor, and AWS Personal Health Dashboard.

• Question 112:

  Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?

  A. Security groups

  B. Amazon Route 53

  C. AWS Direct Connect

  D. Amazon VPC

  Correct Answer: A

  A security group acts as a virtual firewall for your EC2 instances to control incoming and outgoing traffic. Inbound rules control the incoming traffic to your instance, and outbound rules control the outgoing traffic from your instance. When you launch an instance, you can specify one or more security groups.

• Question 113:

  A company's web application requires AWS credentials and authorizations to use an AWS service. Which IAM entity should the company use as best practice?

  A. IAM role

  B. IAM user

  C. IAM group

  D. IAM multi-factor authentication (MFA)

  Correct Answer: A

  https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html

• Question 114:

  A company is creating a document that defines the operating system patch routine for all the company's systems. Which AWS resources should the company include in this document? (Choose two.)

  A. Amazon EC2 instances

  B. AWS Lambda functions

  C. AWS Fargate tasks

  D. Amazon RDS instances

  E. Amazon Elastic Container Service (Amazon ECS) instances

  Correct Answer: AE

  The answer is AE. RDS OS patches are applied automatically during maintenance windows. According to https://docs.aws.amazon.com/whitepapers/latest/cost-optimization-reservation-models/standard-vs.- convertible-offering-classes.html , "Amazon RDS upgrades the operating system to a newer version to improve database performance and customers' overall security posture."

• Question 115:

  A company needs an Amazon EC2 instance for a rightsized database server that must run constantly for 1 year. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

  A. Standard Reserved Instance

  B. Convertible Reserved Instance

  C. On-Demand Instance

  D. Spot Instance

  Correct Answer: A

• Question 116:

  A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege. Which AWS service or feature should the company use to enforce this principle?

  A. Security groups

  B. AWS Shield

  C. AWS Global Accelerator

  D. AWS Direct Connect gateway

  Correct Answer: A

  A ?Security groups control the traffic that is allowed to reach and leave the resources that it is associated with.

  AWS Shield is for DDoS protection.

  AWS Global Accelerator is for global reach.

  AWS Direct Connect is a cloud service that links your network directly to AWS to deliver consistent, low- latency performance.

• Question 117:

  A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud. Which AWS service will meet this requirement?

  A. Amazon Cognito

  B. AWS Security Hub

  C. AWS Shield

  D. AWS WAF

  Correct Answer: A

  A ?Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.

  AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated remediation. Not relevant.

  AWS Shield and AWS WAF are for threat protection (Shield for DDoS, WAF for SQL injections), not relevant to the question.

• Question 118:

  A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements. Which AWS service or program should the company use to determine which AWS services meet the regional requirements?

  A. AWS Audit Manager

  B. AWS Shield

  C. AWS Compliance Program

  D. AWS Artifact

  Correct Answer: C

  C. AWS Compliance Program

  The AWS Compliance Program provides a framework for customers to navigate regulatory requirements by providing information on how AWS services and features can help address compliance needs. AWS compliance programs help customers meet compliance requirements for industry-specific standards, such as HIPAA, PCI DSS, and others.

  In this scenario, the company needs to ensure that it meets regional regulatory requirements while building an application that uses AWS services. The AWS Compliance Program can help the company identify which AWS services and features can help meet regulatory requirements for European countries. The program provides resources such as whitepapers, reports, and certifications that can help organizations understand how AWS services can be used to support their compliance objectives.

• Question 119:

  Which AWS service helps developers use loose coupling and reliable messaging between microservices?

  A. Elastic Load Balancing

  B. Amazon Simple notification Service (Amazon SNS)

  C. Amazon CloudFront

  D. Amazon Simple Queue Service (Amazon SQS)

  Correct Answer: D

  D- Amazon SQS is a fully managed message queuing for microservices, distributed systems, and serverless applications.

  Elastic Load Balancing automatically distributes incoming application traffic; it doesn't help with developer work in this context.

  Amazon SNS is used for email and notifications to users, not for developers.

  Amazon CloudFront is a content delivery network (CDN) service built for securely delivering content to customers. It is not used for loose coupling nor microservices.

• Question 120:

  An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost- effective manner. Which AWS Cloud features will help the company meet this requirement? (Choose two.)

  A. Cross-Region workload deployment

  B. Pay-as-you-go pricing

  C. Built-in AWS CloudTrail audit capabilities

  D. Auto Scaling policies

  E. Centralized logging

  Correct Answer: BD

  BD ?Pay-as-you-go pricing is great for a cost-effective manner, and with auto scaling policies, customer can define a scaling policy that performs the optimal scaling action, such as change in capacity by value or percentage, or setting exact

  capacity values.

  Cross-Region workload deployment is not fitting for the question (there is nothing about globalisation).

  There is no request for monitoring user activity, so CloudTrail is also incorrect.

  There is nothing about checking any statuses or collecting logs, so there is no need for centralized logging.