Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1231:

  A company requires an isolated environment within AWS for security purposes. Which action can be taken to accomplish this?

  A. Create a separate Availability Zone to host the resources.

  B. Create a separate VPC to host the resources.

  C. Create a placement group to host the resources.

  D. Create an AWS Direct Connect connection between the company and AWS.

  Correct Answer: B

  Network isolation A virtual private cloud (VPC) is a virtual network in your own logically isolated area in the AWS Cloud. Use separate VPCs to isolate infrastructure by workload or organizational entity. A subnet is a range of IP addresses in a VPC. When you launch an instance, you launch it into a subnet in your VPC. Use subnets to isolate the tiers of your application (for example, web, application, and database) within a single VPC. Use private subnets for your instances if they should not be accessed directly from the internet. To call the Amazon EC2 API from your VPC without sending traffic over the public internet, use AWS PrivateLink.

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html

• Question 1232:

  A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

  A. Launch an Amazon EC2 instance with default tenancy.

  B. Launch an Amazon EC2 instance on a Dedicated Host.

  C. Create an On-Demand Capacity Reservation.

  D. Purchase Dedicated Reserved Instances.

  Correct Answer: B

• Question 1233:

  A company must keep records of all resource changes that are made through the AWS Management Console and AWS APIs. Which AWS service should the company use to meet this requirement?

  A. Amazon CloudWatch

  B. AWS CloudTrail

  C. AWS X-Ray

  D. Amazon Inspector

  Correct Answer: B

  Reference: https://aws.amazon.com/cloudtrail/

• Question 1234:

  According to the AWS shared responsibility model, which task is the responsibility of AWS for workloads running on Amazon EC2?

  A. Updating the physical hardware

  B. Updating the operating system

  C. Updating the database engine

  D. Updating the user data

  Correct Answer: A

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 1235:

  Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

  A. Amazon CloudWatch

  B. AWS Trusted Advisor

  C. AWS CloudTrail

  D. Amazon Inspector

  Correct Answer: C

  Reference: https://aws.amazon.com/cloudtrail/

• Question 1236:

  A user has an AWS Business Support plan and requires detailed billing information. Which AWS resource will help?

  A. AWS Concierge Support

  B. AWS Service Catalog

  C. AWS Budgets

  D. AWS Cost and Usage Report

  Correct Answer: A

  Reference: https://aws.amazon.com/premiumsupport/faqs/

• Question 1237:

  A company has enabled billing alerts in its AWS account and wants to receive a notification through Amazon Simple Notification Service (Amazon SNS) whenever its monthly bill exceeds a set amount. Which AWS service or tool should the company use to achieve this?

  A. Amazon CloudWatch

  B. Cost Explorer

  C. AWS Cost and Usage Report

  D. AWS Pricing Calculator

  Correct Answer: A

  Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html

• Question 1238:

  How does the AWS global infrastructure offer high availability and fault tolerance to its users?

  A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and are interconnected with low-latency networks and redundant power supplies.

  B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location.

  C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions.

  D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.

  Correct Answer: D

  Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html

• Question 1239:

  Which AWS Trusted Advisor check includes the verification of AWS CloudTrail logging?

  A. Performance

  B. Fault tolerance

  C. Security

  D. Service limits

  Correct Answer: A

• Question 1240:

  Which design principles of the AWS Well-Architected Framework help increase reliability? (Select TWO.)

  A. Automatically recover from failure

  B. Enable traceability.

  C. Scale horizontally to increase workload availability.

  D. Automate security best practices

  E. Keep people away from data

  Correct Answer: AE