Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1301:

  Which of the following are benefits of using the AWS Cloud? (Select TWO )

  A. 100% fault tolerance

  B. Total control over underlying infrastructure

  C. Fast provisioning of IT resources

  D. Outsourcing all application coding to AWS

  E. Ability to go global quickly

  Correct Answer: BE

• Question 1302:

  Which of the following are general AWS Cloud design principles described in the AWS Well- Architected Framework? (Select TWO.)

  A. Consolidate key components into monolithic architectures.

  B. Test systems at production scale.

  C. Provision more capacity than a workload is expected to need.

  D. Drive architecture design based on data collected about the workload behavior and requirements.

  E. Make AWS Cloud architectural decisions static, one-time events.

  Correct Answer: AB

• Question 1303:

  What does Amazon CloudFront provide?

  A. Automatic scaling for all resources to power an application from a single unified interface

  B. Secure delivery of data, videos application. and APIs to users globally with low latency

  C. Ability to directly manage traffic globally through a variety of routing types, including latency- based routing, geo ONS. Geoproximity, and weighted round robin

  D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers. IP addresses, and AWS Lambda functions

  Correct Answer: A

• Question 1304:

  A company wants to use an AWS service to continuously monitor the health of its application endpoints based on proximity to application users. The company also needs to route traffic to healthy Regional endpoints and to improve application availability and performance.

  Which service will meet these requirements?

  A. Amazon Inspector

  B. Amazon CloudWatch

  C. AWS Global Accelerator

  D. AWS Cloud Formation

  Correct Answer: C

  Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.

  Amazon CloudWatch is a monitoring and management service that provides data and actionable insights for AWS, hybrid, and on-premises applications and infrastructure resources. With CloudWatch, you can collect and access all your performance and operational data in form of logs and metrics from a single platform.

  AWS Global Accelerator uses the vast, congestion-free AWS global network to route TCP and UDP traffic to a healthy application endpoint in the closest AWS Region to the user. If there's an application failure, AWS Global Accelerator provides instant failover to the next best endpoint.

  CloudFormation creates a bucket for each region in which you upload a template file. The buckets are accessible to anyone with Amazon Simple Storage Service (Amazon S3) permissions in your AWS account. If a bucket created by CloudFormation is already present, the template is added to that bucket.

• Question 1305:

  An application that runs on Amazon EC2 needs to accommodate a flexible workload that can run or terminate at any time of day. Which pricing model will accommodate these requirements at the LOWEST cost?

  A. Spot Instances

  B. Reserved Instances

  C. On-Demand Instances

  D. Dedicated Host

  Correct Answer: A

• Question 1306:

  A company wants to implement an automated security assessment of the scanty and network accessibility of its Amazon EC2 instances. Which AWS service can be used To accomplish this?

  A. Amazon Inspector

  B. AWSConfig

  C. AWS Trusted Advisor

  D. Amazon GuardDuty

  Correct Answer: D

• Question 1307:

  A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?

  A. AWS Key Management Service (AWS KMS)

  B. AWS Certificate Manager (ACM)

  C. AWS CloudHSM

  D. AWS Systems Manager

  Correct Answer: C

• Question 1308:

  Which AWS service provides a report that enables users to assess AWS infrastructure compliance?

  A. AWS Certificate Manager (ACM)

  B. Amazon DocumentDB (with MongoDB compatibility)

  C. AWS Artifact

  D. AWS Trusted Advisor

  Correct Answer: A

• Question 1309:

  Which of the following is an AWS value proportion that describes a user's ability to scale infrastructure based on demand?

  A. Speed of innovation

  B. Resource elasticity

  C. Decoupled architecture

  D. Global deployment

  Correct Answer: B

• Question 1310:

  A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of

  VPCs to hundreds over time.

  Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

  A. VPC endpoints

  B. AWS Transit Gateway

  C. Amazon Route 53

  D. AWS Secrets Manager

  Correct Answer: A