Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1241:

  A company believes an unauthorized user copied data from an Amazon S3 bucket to their own account.

  Which AWS service will record the actions taken by the user?

  A. Amazon CloudWatch

  B. AWS CloudTrail

  C. AWS Infrastructure Event Management

  D. AWS Systems Manager

  Correct Answer: B

  Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html

• Question 1242:

  Which AWS service provides a simple way to set up a new multi-account AWS environment and govern it at scale?

  A. AWS Trusted Advisor

  B. AWS Security Hub

  C. AWS Control Tower

  D. AWS Resource Access Manager

  Correct Answer: C

  Reference: https://aws.amazon.com/about-aws/whats-new/2020/04/you-can-now-use-aws-control-tower-to-set-up-new-multi-account-aws-environments-in-aws-organizations/

• Question 1243:

  A company wants to build an application for a new line of business According to the AWS Well-Architected Framework, what design principles should be implemented? (Select TWO.)

  A. Consolidate multiple AWS accounts into a single account

  B. Buy and host hardware in the AWS Cloud.

  C. Decouple the AWS Cloud architecture to break up monolithic deployments.

  D. Move on-premises network hardware to VPCs.

  E. Design elasticity into the AWS Cloud design

  Correct Answer: AC

• Question 1244:

  A user is building an application on AWS that requires a backend database. The application requires access to the operating system of the instance where the database is installed in order to run scripts Where should the database be hosted if the user's goal is to create minimum management overhead?

  A. On Amazon RDS

  B. On Amazon EC2

  C. On Amazon DynamoDB

  D. On Amazon S3

  Correct Answer: B

• Question 1245:

  Which feature of AWS Auto Scaling will forecast future traffic to schedule changes in the number of Amazon EC2 instances at the appropriate times?

  A. Scheduled scaling

  B. Predictive scaling

  C. Target tracking scaling

  D. Step scaling

  Correct Answer: A

• Question 1246:

  Which AWS service enables users to identify the changes made to a resource over time?

  A. AWS CloudFormation

  B. AWSConfig

  C. AWS Service Catalog

  D. AWS Identity and Access Management (IAM)

  Correct Answer: A

• Question 1247:

  Which of the following are security best practices for using AWS Identity and Access Management (IAM)? (Select TWO)

  A. Use AWS account root user credentials for IAM tasks

  B. Rotate credentials regularly

  C. Do not remove credentials, even if they are never used

  D. Enable multi-factor authentication (MFA)

  E. Use inline policies instead of customer managed policies

  Correct Answer: AB

• Question 1248:

  Which tasks require the use of the AWS account root user? (Select TWO )

  A. Launching a new Amazon EC2 instance

  B. Viewing AWS CloudTrail logs

  C. Contacting AWS Support

  D. Changing AWS Support plans

  E. Changing billing currency

  Correct Answer: BE

• Question 1249:

  Which AWS service provides recommendations for rightsizing AWS resources such as Amazon EC2 instances, Amazon Elastic Block Store (Amazon EBS) volumes and Amazon RDS databases to help users reduce costs?

  A. Amazon Inspector

  B. AWS Trusted Advisor

  C. AWS Service Health Dashboard

  D. Amazon Forecast

  Correct Answer: C

• Question 1250:

  A company has an AWS environment that consists of a VPC. multiple subnets, and many Amazon EC2 instances in the subnets An engineer wants to restrict inbound traffic to one particular EC2 instance without affecting the other EC2

  instances.

  Which AWS service or feature should the engineer use to meet this requirement?

  A. Network ACLs

  B. Security groups

  C. Amazon GuardDuty D. AWS Shield

  Correct Answer: A