Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1221:

  Which VPC component provides a layer of security at the subnet level?

  A. Security groups

  B. Network ACLs

  C. NAT gateways

  D. Route tables

  Correct Answer: B

• Question 1222:

  Which benefit is available for Convertible Reserved Instances but NOT Standard Reserved Instances?

  A. The instances can be exchanged for instances of a different instance size.

  B. The instances can be exchanged for instances of a different instance family.

  C. The instances can be changed to a different Availability Zone.

  D. The instances can be changed to a different AWS Region.

  Correct Answer: C

  Reference: https://aws.amazon.com/about-aws/whats-new/2016/09/amazon-ec2-convertible-reserved-instances-and-the-reserved-instance-regional-benefit/

• Question 1223:

  Which service enables customers to audit API calls in their AWS accounts?

  A. AWS CloudTrail

  B. AWS Trusted Advisor

  C. Amazon Inspector

  D. AWS X-Ray

  Correct Answer: A

  AWS Audit Manager is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Audit Manager. CloudTrail captures all API calls for Audit Manager as events. Reference: https://aws.amazon.com/cloudtrail/

• Question 1224:

  A developer has an AWS account and needs access to another account's test database. Which AWS service or feature can the developer use to gain access to the test database?

  A. Amazon Macie

  B. Security groups

  C. IAM roles

  D. AWS Trusted Advisor

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html

• Question 1225:

  Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

  A. a loosely coupled architecture.

  B. a tightly coupled architecture.

  C. a stateless architecture.

  D. a stateful architecture.

  Correct Answer: A

  Reference: https://aws.amazon.com/blogs/apn/migrating-applications-from-monolithic-to-microservice-on-aws/

• Question 1226:

  Which of the following security-related aspects of running an Amazon Elastic Compute Cloud (Amazon EC2) instance is the responsibility of AWS?

  A. Security of private keys

  B. Hypervisor software updates

  C. Security updates to software running on the instance

  D. Policies controlling instance access

  Correct Answer: B

• Question 1227:

  Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

  A. Amazon Detective

  B. Amazon Inspector

  C. Amazon Macie

  D. AWS Security Hub

  Correct Answer: D

  Reference: https://aws.amazon.com/security-hub/?aws-security-hub-blogs.sort-by=item.additionalFields.createdDateandaws-security-hub-blogs.sort-order=desc

• Question 1228:

  AWS can relieve a company's IT staff of which of the following IT tasks? (Choose two.)

  A. Patching database software

  B. Storage capacity planning

  C. Creating database schemas

  D. Setting up access controls for data

  E. Writing application code

  Correct Answer: AC

• Question 1229:

  A user with an AWS Basic Support plan has determined that illegal activities are being run on their AWS resources What is the recommended method for the user to report the activity to AWS?

  A. Contact the AWS Concierge Support team.

  B. Contact an AWS technical account manager.

  C. Contact the AWS Abuse team.

  D. Contact the AWS Support team.

  Correct Answer: C

• Question 1230:

  Which of the following is a best practice for creating policies for IAM users?

  A. Start with a large set of permissions and remove the permissions that are not required.

  B. Use only Amazon managed policies.

  C. Start with a minimum set of permissions and grant additional permissions as necessary.

  D. Attach policies directly to each user individually.

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html