Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1231:

  A cloud engineer needs to download AWS security and compliance documents for an upcoming audit.

  Which AWS service can provide the documents?

  A. AWS Trusted Advisor
  B. AWS Artifact
  C. AWS Well-Architected Tool
  D. AWS Systems Manager
  B. AWS Artifact

• Question 1232:

  Which AWS service or feature can a company use to apply security rules to a subnet for Amazon EC2 instances?

  A. AWSWAF
  B. AWS Shield
  C. Network ACLs
  D. Security groups
  C. Network ACLs

  ---

  Explanation/Reference:

  C. Network ACLs

  Network Access Control Lists (Network ACLs) are a feature of Amazon VPC that act as a firewall for controlling traffic in and out of a subnet. Network ACLs enable companies to create rules that allow or deny traffic to their Amazon EC2

  instances based on IP protocol, port, and source or destination IP address range. Network ACLs are stateless, meaning that return traffic must be explicitly allowed by rules.

  AWS WAF is a web application firewall that helps protect web applications from common web exploits.

  AWS Shield is a service that provides DDoS protection for applications running on AWS.

  Security Groups are another feature of Amazon VPC that act as a firewall for controlling traffic to Amazon EC2 instances. Security groups are stateful, meaning that they automatically allow return traffic.

• Question 1233:

  A company wants a service that will discover the company's sensitive data on AWS and identity potential exposure of the data. Which AWS service will meet these requirements in the LEAST amount of time?

  A. AWS Glue
  B. Amazon Polly
  C. Amazon Macie
  D. AWS Secrets Manager
  C. Amazon Macie

• Question 1234:

  A company has multiple data sources across the organization and wants to consolidate data into one data warehouse. Which AWS service can be used to meet this requirement?

  A. Amazon DynamoDB
  B. Amazon Redshift
  C. Amazon Athena
  D. Amazon QuickSight
  B. Amazon Redshift

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/redshift/faqs/

• Question 1235:

  A user is building an application on AWS that requires a backend database. The application requires access to the operating system of the instance where the database is installed in order to run scripts. Where should the database be hosted if the user's goal is to create minimum management overhead?

  A. On Amazon RDS
  B. On Amazon EC2
  C. On Amazon DynamoDB
  D. On Amazon S3
  B. On Amazon EC2

• Question 1236:

  Which tasks require the use of AWS account root user credentials? (Select TWO.)

  A. Configure multi-factor authentication (MFA) delete for an Amazon S3 bucket.
  B. Create an IAM administrator access policy.
  C. Open a support ticket with AWS to request an increase to service quotas.
  D. Change an AWS Support plan.
  E. Change payment currency for an AWS account.
  B. Create an IAM administrator access policy.
  D. Change an AWS Support plan.

• Question 1237:

  Which disaster recovery scenario offers the lowest probability of down time?

  A. Backup and restore
  B. Pilot light
  C. Warm standby
  D. Multi-site active-active
  D. Multi-site active-active

  ---

  Explanation/Reference:

  Backup and Restore: a simple, straightforward, cost-effective method that backs up and restores data as needed. Keep in mind that because none of your data is on standby, this method, while cheap, can be quite time-consuming.

  Pilot Light: This method keeps critical applications and data at the ready so that it can be quickly retrieved if needed.

  Warm Standby: This method keeps a duplicate version of your business' core elements running on standby at all times, which makes for a little downtime and an almost seamless transition. Multi-Site Solution: Also known as a Hot Standby,

  this method fully replicates your company's data/applications between two or more active locations and splits your traffic/usage between them. If a disaster strikes, everything is simply rerouted to the unaffected area, which means you'll suffer

  almost zero downtime. However, by running two separate environments simultaneously, you will obviously incur much higher costs.

  Reference: https://cloudranger.com/best-practices-aws-disaster-recovery-planning/

• Question 1238:

  A company uses Amazon DynamoDB in its AWS Cloud architecture. According to the AWS shared responsibility model, which of the following are responsibilities of the company? (Select TWO )

  A. Operating system patching and upgrades
  B. Application of appropriate permissions with IAM tools
  C. Configuration of data encryption options
  D. Creation of DynamoDB endpoints
  E. Infrastructure provisioning and maintenance
  A. Operating system patching and upgrades
  C. Configuration of data encryption options

• Question 1239:

  A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times. Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?

  A. On-Demand Instances
  B. Spot Instances
  C. Reserved Instances
  D. Dedicated Instances
  A. On-Demand Instances

• Question 1240:

  A development team wants to publish and manage web services that provide REST APIs. Which AWS service will meet this requirement?

  A. AWS App Mesh
  B. Amazon API Gateway
  C. Amazon CloudFront
  D. AWS Cloud Map
  B. Amazon API Gateway

  ---

  Explanation/Reference:

  Amazon API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale. So its B