Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1331:

  A company has multiple departments. Each department uses its own AWS account.

  Which AWS service or tool can the company use to combine the billing for all accounts into one bill?

  A. Amazon Forecast

  B. AWS Budgets

  C. AWS Organizations

  D. AWS Marketplace

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html

• Question 1332:

  A large company has a workload that requires hardware to remain on premises. The company wants to use the same management and control plane services that it currently uses on AWS. Which AWS service should the company use to meet these requirements?

  A. AWS Device Farm

  B. AWS Fargate

  C. AWS Outposts

  D. AWS Ground Station

  Correct Answer: C

  Reference: https://aws.amazon.com/outposts/

• Question 1333:

  Which of the following are advantages of using Amazon EC2 instances over traditional on-premises servers? (Choose two.)

  A. Pay-as-you-go pricing

  B. Automation

  C. Self-maintenance of servers

  D. Agility

  E. Access to physical hosts

  Correct Answer: AE

• Question 1334:

  When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.)

  A. Physical storage hardware

  B. Operating system administration

  C. Network infrastructure of data center

  D. Project management

  E. Database schema development

  Correct Answer: AC

• Question 1335:

  Which guideline is a well-architected design principle for building cloud applications?

  A. Keep static data closer to compute resources.

  B. Provision resources for peak capacity.

  C. Design for automated recovery from failure.

  D. Use tightly coupled components.

  Correct Answer: C

• Question 1336:

  Which controls are shared under the AWS shared responsibility model? (Choose two.)

  A. Awareness and training

  B. Patching of Amazon RDS

  C. Configuration management

  D. Physical and environmental controls

  E. Service and communications protection or security

  Correct Answer: AC

  In the AWS shared security model, a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services.

  Examples of shared controls include:

  *Patch Management AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. *Configuration Management AWS maintains the configuration of its

  infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

  *Awareness and Training AWS trains AWS employees, but a customer must train their own employees.

  Customer Specific Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services.

  Examples of customer specific controls include:

  *Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/#:~:text=Shared%20Controls %20?20Controls%20which%20apply,their%20use%20of%20AWS%20services.

• Question 1337:

  A company recently migrated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts. Which AWS service should the company use to achieve this goal?

  A. Amazon Macie

  B. Amazon GuardDuty

  C. AWS Shield

  D. Amazon Detective

  Correct Answer: B

  Reference: https://aws.amazon.com/guardduty/

• Question 1338:

  A user can optimize Amazon EC2 costs by performing which of the following tasks? (Choose two.)

  A. Implementing Auto Scaling groups to add and remove instances based on demand.

  B. Creating a policy to restrict IAM users from creating new instances.

  C. Setting a budget to limit spending on EC2 instances using AWS Budgets.

  D. Purchasing Reserved Instances.

  E. Adding EC2 instances to a second AWS Region that is geographically close to the end users.

  Correct Answer: BC

• Question 1339:

  Which AWS service acts as a data extract, transform, and load (ETL) tool to make it easy to prepare data for analytics?

  A. Amazon QuickSight

  B. Amazon Athena

  C. AWS Glue

  D. AWS Elastic Beanstalk

  Correct Answer: C

  Reference: https://aws.amazon.com/blogs/database/how-to-extract-transform-and-load-data-for-analytic- processing-using-aws-glue-part-2/

• Question 1340:

  A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?

  A. Enable AWS Shield Advanced

  B. Create a custom IAM policy

  C. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace

  D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key

  Correct Answer: B