Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1191:

  Which AWS service is a highly available and scalable DNS web service?

  A. Amazon VPC

  B. Amazon CloudFront

  C. Amazon Route 53

  D. Amazon Connect

  Correct Answer: C

  Reference: https://aws.amazon.com/route53/

• Question 1192:

  A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement?

  A. AWS VPN

  B. Amazon Route 53

  C. Amazon API Gateway

  D. Amazon Connect

  Correct Answer: A

  Reference: https://aws.amazon.com/vpn/

• Question 1193:

  A company has defined the AWS resources that it needs for a new application. The company needs to estimate the costs of running the application on AWS. What should the company do to meet this requirement?

  A. Take advantage of AWS on-demand pricing.

  B. Use the AWS Pricing Calculator to generate an approximate dollar amount.

  C. Use Amazon QuickSight to analyze current on-premises spending.

  D. Use Amazon AppStream 2.0 for real-time pricing analytics.

  Correct Answer: B

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/estimating-aws-resource-costs/

• Question 1194:

  Which AWS service or feature for technical assistance is available to a user who has the AWS Basic Support plan?

  A. AWS senior support engineers

  B. AWS technical account manager (TAM)

  C. AWS Trusted Advisor

  D. AWS Discussion Forums

  Correct Answer: A

• Question 1195:

  When an Amazon EC2 instance is terminated, which AWS service can identify the user that made the API call?

  A. Amazon CloudWatch

  B. AWS CloudTrail

  C. AWS X-Ray

  D. AWS Identity and Access Management (IAM)

  Correct Answer: B

  Reference: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html

• Question 1196:

  Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?

  A. Patch management controls

  B. Awareness and training controls

  C. Physical and environmental controls

  D. Configuration management controls

  Correct Answer: C

• Question 1197:

  Which feature can be used to protect Amazon S3 buckets from accidental overwrites or deletes?

  A. Lifecycle policy

  B. object versioning

  C. Server-side encryption

  D. Bucket ACL

  Correct Answer: B

  Reference: https://medium.com/tensult/how-to-protect-objects-from-accidental-deletion-and-overwrite-using-s3-object-versioning-5222796ab156

• Question 1198:

  Which of the following are AWS security best practices for using AWS Identity and Access Management (IAM) to manage an AWS account root user? (Choose two.)

  A. Set up multi-factor authentication (MFA) for the root user.

  B. Remove all IAM policies from the root user.

  C. Delete the root user access keys.

  D. Use the root user for daily tasks.

  E. Assign a read-only access policy to the root user.

  Correct Answer: AE

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

• Question 1199:

  A database administrator is trying to determine who deleted a critical Amazon Redshift cluster. Which AWS service helps with monitoring and retaining this type of account activity?

  A. AWS CloudTrail

  B. AWS Organizations

  C. AWS Identity and Access Management (IAM)

  D. AWS Trusted Advisor

  Correct Answer: A

• Question 1200:

  A company runs its business-critical web application on Amazon Elastic Container Service (Amazon ECS) and Amazon DynamoDB. The workload spikes up to 10 times the normal workload multiple times during the day. Which AWS Cloud feature enables the company to meet these changes in demand?

  A. Agility

  B. Global reach

  C. Scalability

  D. Security

  Correct Answer: C

  Reference: https://aws.amazon.com/autoscaling/