Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1261:

  Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

  A. Ensuring network connectivity from AWS to the internet
  B. Patching and xing aws within the AWS Cloud infrastructure
  C. Ensuring the physical security of cloud data centers
  D. Ensuring Amazon EBS volumes are backed up
  D. Ensuring Amazon EBS volumes are backed up

• Question 1262:

  Which AWS service is used to temporarily provide federated security credentials to access AWS resources?

  A. Amazon GuardDuty
  B. AWS Simple Token Service (AWS STS)
  C. AWS Secrets Manager
  D. AWS Certificate Manager
  B. AWS Simple Token Service (AWS STS)

  ---

  Explanation/Reference:

  The AWS service that is used to temporarily provide federated security credentials to access AWS resources is AWS Simple Token Service (AWS STS). Option B is the correct answer.

  AWS STS is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users that you authenticate (federated users). It provides a way to grant access to your AWS resources for users who are not defined in your AWS account.

• Question 1263:

  Which of the following are design principles of the reliability pillar of the AWS Well- Architected Framework? (Select TWO.)

  A. Perform operations as code.
  B. Stop guessing capacity.
  C. Adopt serverless architecture whenever possible.
  D. Use build and deployment management systems.
  E. Make changes to infrastructure by using automation.
  B. Stop guessing capacity.
  E. Make changes to infrastructure by using automation.

• Question 1264:

  Which of the following acts as a virtual firewall at the Amazon EC2 instance level to control traffic for one or more instances?

  A. Access keys
  B. Virtual private gateways
  C. Security groups
  D. Access Control Lists (ACL)
  C. Security groups

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html

• Question 1265:

  Which AWS service enables the decoupling and scaling of applications?

  A. Amazon Simple Queue Service (Amazon SQS)
  B. AWS Outposts
  C. Amazon S3
  D. Amazon Simple Email Service (Amazon SES)
  A. Amazon Simple Queue Service (Amazon SQS)

  ---

  Explanation/Reference:

  Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

• Question 1266:

  A company suspects that its AWS resources are being used for illegal activities. Which AWS group or team should the company notify?

  A. AWS Abuse team
  B. AWS Support team
  C. AWS technical account managers
  D. AWS Professional Services team
  A. AWS Abuse team

  ---

  Explanation/Reference:

  "If you suspect that AWS resources are used for abusive purposes, contact the AWS Trust and Safety team using the Report Amazon AWS abuse form, or by contacting [email protected]. Provide all the necessary information, including logs in plaintext, email headers, and so on, when you submit your request. Note: AWS Support can't assist with reports of abuse or questions about notifications from the AWS Trust and Safety team. If you have questions for the AWS Trust and Safety team, reply directly to their email.

• Question 1267:

  Which Amazon EC2 pricing model offers the MOST significant discount when compared to On-Demand Instances?

  A. Partial Upfront Reserved Instances for a 1-year term
  B. All Upfront Reserved Instances for a 1-year term
  C. All Upfront Reserved Instances for a 3-year term
  D. No Upfront Reserved Instances for a 3-year term
  C. All Upfront Reserved Instances for a 3-year term

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/ec2/pricing/reserved-instances/

• Question 1268:

  Which AWS service should be used to create a billing alarm?

  A. AWS Trusted Advisor
  B. AWS CloudTrail
  C. Amazon CloudWatch
  D. Amazon QuickSight
  C. Amazon CloudWatch

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html

• Question 1269:

  Which AWS service gives users the ability to download compliance reports from third party auditors?

  A. AWS Lambda
  B. AWS Trusted Advisor
  C. AWS Artifact
  D. AWS Audit Manager
  C. AWS Artifact

• Question 1270:

  Which AWS service, feature, or tool uses machine learning to continuously monitor cost and usage for unusual cloud spending?

  A. Amazon Lookout for Metrics
  B. AWS Budgets
  C. Amazon CloudWatch
  D. AWS Cost Anomaly Detection
  D. AWS Cost Anomaly Detection

  ---

  Explanation/Reference:

  D " AWS Cost Anomaly Detection is an AWS cost management feature that uses machine learning to continually monitor your cost and usage to detect unusual spends." ref https://docs.aws.amazon.com/wellarchitected/latest/managementand-governance-guide/aws-cloud- financial-management-services-and-tools.html