Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1281:

  A global media company uses AWS Organizations to manage multiple AWS accounts. Which AWS service or feature can the company use to limit the access to AWS services for member accounts?

  A. AWS Identity and Access Management (IAM)
  B. Service control policies (SCPs)
  C. Organizational units (OUs)
  D. Access control lists (ACLs)
  B. Service control policies (SCPs)

  ---

  Explanation/Reference:

  in AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs). SCPs enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access.

• Question 1282:

  Which of the following is an example of how moving to the AWS Cloud reduces upfront cost?

  A. By replacing large variable costs with lower capital investments
  B. By replacing large capital investments with lower variable costs
  C. By allowing the provisioning of compute and storage at a fixed level to meet peak demand
  D. By replacing the repeated scaling of virtual servers with a simpler fixed-scale model
  B. By replacing large capital investments with lower variable costs

  ---

  Explanation/Reference:

  AWS does not require minimum spend commitments or long-term contracts. You replace large upfront expenses with low variable payments that only apply to what you use. With AWS you are not bound to multi-year agreements or complicated licensing models.

  Reference: https://aws.amazon.com/economics/

• Question 1283:

  A company wants to expand from one AWS Region into a second AWS Region. What does the company need to do to start supporting the new Region?

  A. Contact an AWS Account Manager to sign a new contract
  B. Move an Availability Zone to the new Region
  C. Begin deploying resources in the second Region
  D. Download the AWS Management Console for the new Region
  C. Begin deploying resources in the second Region

  ---

  Explanation/Reference:

  B. Move an availability zone into the Region; is suggesting that the customer purchase a building and build a new data center into it (not very cost effective for the customer- considering AWS has already done that and D; Download the AWS management console !!

• Question 1284:

  A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS) attacks. Which AWS service or tool will provide this protection?

  A. Network access control list (ACL)
  B. AWS Shield
  C. Security group
  D. Amazon GuardDuty
  B. AWS Shield

• Question 1285:

  A user wants to move legacy applications to the AWS Cloud to reduce the total cost.

  Which option is the MOST cost-effective according to best practices?

  A. Rewrite the legacy applications in an open-source language, such as Python.
  B. Right-size the Amazon EC2 instances to prevent over-provisioning in terms of compute and memory.
  C. Migrate relational databases to Amazon DynamoDB
  D. Reserve a data center facility with an upfront payment, which provides an additional discount
  B. Right-size the Amazon EC2 instances to prevent over-provisioning in terms of compute and memory.

• Question 1286:

  Which of the following will enhance the security of access to the AWS Management Console? (Choose two.)

  A. AWS Secrets Manager
  B. AWS Certificate Manager
  C. AWS Multi-Factor Authentication (AWS MFA)
  D. Security groups
  E. Password policies
  C. AWS Multi-Factor Authentication (AWS MFA)
  E. Password policies

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using-programmatic-access/

• Question 1287:

  A company's solutions architect wants to provision a few Amazon EC2 instances in an existing AWS account. The company requires a cost estimate before the company can approve the request.

  Which AWS tool should the solutions architect use to produce the cost estimate?

  A. AWS Pricing Calculator
  B. Cost Explorer
  C. AWS Cost and Usage Report
  D. AWS Budgets
  C. AWS Cost and Usage Report

• Question 1288:

  A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?

  A. AWS Key Management Service (AWS KMS)
  B. AWS Certificate Manager (ACM)
  C. AWS CloudHSM
  D. AWS Systems Manager
  C. AWS CloudHSM

• Question 1289:

  A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Select TWO.)

  A. AWS Command Line Interface (AWS CLI)
  B. AWS Key Management Service (AWS KMS)
  C. AWS Management Console
  D. AWS Resource Access Manager (AWS RAM)
  E. AWS Secrets Manager
  A. AWS Command Line Interface (AWS CLI)
  C. AWS Management Console

• Question 1290:

  Which AWS service offers a global content delivery network (CDN) that helps companies securely deliver websites, videos, applications, and APIs at high speeds with low latency?

  A. Amazon EC2
  B. Amazon CloudFront
  C. Amazon CloudWatch
  D. AWS CloudFormation
  B. Amazon CloudFront