Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1301:

  Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?

  A. Amazon Cognito
  B. AWS Shield
  C. AWS IAM role
  D. AWS IAM user access key
  C. AWS IAM role

• Question 1302:

  Which component of the AWS global infrastructure does Amazon CloudFront use to deliver content to end users with low latency?

  A. Edge locations
  B. AWS Regions
  C. Availability Zones
  D. AWS Direct Connect connections
  A. Edge locations

• Question 1303:

  Which of the following services provides on-demand access to AWS compliance reports?

  A. AWS IAM
  B. AWS Artifact
  C. Amazon GuardDuty
  D. AWS KMS
  B. AWS Artifact

  ---

  Explanation/Reference:

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA).

  Reference: https://aws.amazon.com/artifact/

• Question 1304:

  Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted?

  A. Spot Instances
  B. Dedicated Hosts
  C. On-Demand Instances
  D. Reserved Instances
  C. On-Demand Instances

• Question 1305:

  A company requires a dedicated network connection between its on-premises servers and the AWS Cloud. Which AWS service should be used?

  A. AWS VPN
  B. AWS Direct Connect
  C. Amazon API Gateway
  D. Amazon Connect
  B. AWS Direct Connect

  ---

  Explanation/Reference:

  You can use AWS Direct Connect to establish a private virtual interface from your on-premise network directly to your Amazon VPC, providing you with a private, high bandwidth network connection between your network and your VPC. With multiple virtual interfaces, you can even establish private connectivity to multiple VPCs while maintaining network isolation.

  Reference: https://aws.amazon.com/directconnect/

• Question 1306:

  A company is developing a report implemented using AWS Step Functions. Amazon CloudWatch shows errors in the Step Functions task state machine. To troubleshoot each task the state input needs to be included along with the error message in the state output.

  Which coding practice can preserve both the original input and the error for the state?

  A. Use ResultPath in a Catch statement to include the error with the original input
  B. Use InputPath in a Catch statement and set the value to null.
  C. Use ErrorEquals in a Retry statement to include the error with the original input
  D. Use OutputPath in a Retry statement and set the value to $.
  A. Use ResultPath in a Catch statement to include the error with the original input

• Question 1307:

  Which pillar of the AWS well-architected framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?

  A. Security
  B. Reliability
  C. Performance efficiency
  D. Cost optimization
  B. Reliability

• Question 1308:

  Which of the following are aspects of the AWS shared responsibility model? (Select Two.)

  A. Configuration management of infrastructure devices is the customer's responsibility
  B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms
  C. AWS is responsible for protecting the physical cloud infrastructure
  D. AWS is responsible for training the customer's employees on AWS product and services
  E. For Amazon EC2, AWS is responsible for maintaining the guest operating system
  B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms
  C. AWS is responsible for protecting the physical cloud infrastructure

  ---

  Explanation/Reference:

  B. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.

  C. AWS is responsible for protecting the physical cloud infrastructure.

• Question 1309:

  Which AWS services can host a Microsoft SQL Server database? (Choose two.)

  A. Amazon EC2
  B. Amazon Relational Database Service (Amazon RDS)
  C. Amazon Aurora
  D. Amazon Redshift
  E. Amazon S3
  A. Amazon EC2
  B. Amazon Relational Database Service (Amazon RDS)

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/sql/

• Question 1310:

  Which AWS Support plan provides access to an AWS Concierge Support team for account assistance?

  A. AWS Enterprise Support
  B. AWS Business Support
  C. AWS Developer Support
  D. AWS Basic Support
  A. AWS Enterprise Support