Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1291:

  Which AWS service requires the customer to patch the guest operating system?

  A. AWS Lambda

  B. Amazon Elasticsearch Service (Amazon ES)

  C. Amazon EC2

  D. Amazon ElastiCache

  Correct Answer: C

• Question 1292:

  A user is building an application on AWS that requires a backend database. The application requires access to the operating system of the instance where the database is installed in order to run scripts. Where should the database be hosted if the user's goal is to create minimum management overhead?

  A. On Amazon RDS

  B. On Amazon EC2

  C. On Amazon DynamoDB

  D. On Amazon S3

  Correct Answer: B

• Question 1293:

  Which of the following will help a user determine if they need to request a VPC service limit increase?

  A. AWS Personal Health Dashboard

  B. AWS Trusted Advisor

  C. AWS Cost and Usage Report

  D. AWS Service Catalog

  Correct Answer: B

  B. AWS Trusted Advisor

  AWS Trusted Advisor is a service that provides best practice recommendations across multiple areas, including performance, security, and cost optimization. It will check the VPC service limits and will notify the user if the current usage is approaching the service limit. This will help the user to determine if they need to request a service limit increase.

  AWS Personal Health Dashboard provides personalized information about the performance and availability of the AWS services that you use.

  AWS Cost and Usage Report provides detailed information about your costs and usage.

  AWS Service Catalog enables organizations to create and manage catalogs of IT services that are approved for use on AWS.

• Question 1294:

  How can users protect against distributed denial of service (DDoS) attacks in the AWS Cloud?

  A. Use Amazon CloudWatch monitoring.

  B. Configure a firewall.

  C. Use Amazon Redshift

  D. Monitor AWS CloudTrail logging

  Correct Answer: B

• Question 1295:

  A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to

  grow for years.

  What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?

  A. Spot Instances

  B. On-Demand Instances

  C. Savings Plans

  D. Dedicated Hosts

  Correct Answer: B

• Question 1296:

  Which actions allow a company's security team to improve the security procedures for employees accessing AWS resources? (Select TWO )

  A. Create IAM users for groups of employees to share

  B. Create IAM policies based on least privilege principles

  C. Create IAM users in different Availability Zones

  D. Enable multi-factor authentication for privileged users

  E. Specify an individual IAM user for each Amazon EC2 instance

  Correct Answer: BD

• Question 1297:

  Which design principles of the AWS Well-Architected Framework help increase reliability? (Select TWO.)

  A. Automatically recover from failure

  B. Enable traceability.

  C. Scale horizontally to increase workload availability.

  D. Automate security best practices

  E. Keep people away from data

  Correct Answer: AC

• Question 1298:

  A company's security policy requires the company to keep a record of all changes that are made to Amazon EC2 security groups. The record must include information about who made the change and when the change was made. Which AWS service will provide this information?

  A. AWS Lambda

  B. Amazon CloudWatch

  C. AWS WAF

  D. AWS CloudTrail

  Correct Answer: D

• Question 1299:

  Which tool should a developer use to integrate AWS service features directly into an application?

  A. AWS Software Development Kit

  B. AWS CodeDeploy

  C. AWS Lambda

  D. AWS Batch

  Correct Answer: A

• Question 1300:

  Which tasks require the use of the AWS account root user? (Select TWO )

  A. Launching a new Amazon EC2 instance

  B. Viewing AWS CloudTrail logs

  C. Contacting AWS Support

  D. Changing AWS Support plans

  E. Changing billing currency

  Correct Answer: DE

  Tasks that require root user credentials

  We recommend that you use an IAM user with appropriate permissions to perform tasks and access AWS resources. However, you can perform the tasks listed below only when you sign in as the root user of an account.

  Tasks

  Change your account settings. This includes the account name, email address, root user password, and root user access keys. Other account settings, such as contact information, payment currency preference, and Regions, do not require

  root user credentials.

  Restore IAM user permissions. If the only IAM administrator accidentally revokes their own permissions, you can sign in as the root user to edit policies and restore those permissions. Activate IAM access to the Billing and Cost Management

  console. View certain tax invoices. An IAM user with the aws-portal:ViewBilling permission can view and download VAT invoices from AWS Europe, but not AWS Inc or Amazon Internet Services Pvt. Ltd (AISPL).

  Close your AWS account.

  Change your AWS Support plan or Cancel your AWS Support plan. For more information, see IAM for AWS Support

  Register as a seller in the Reserved Instance Marketplace.

  Configure an Amazon S3 bucket to enable MFA (multi-factor authentication) Delete.

  Edit or delete an Amazon S3 bucket policy that includes an invalid VPC ID or VPC endpoint ID.

  Sign up for GovCloud.