Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1331:

  Which of the following services is in the category of AWS serverless platform?

  A. Amazon EMR
  B. Elastic Load Balancing
  C. AWS Lambda
  D. AWS Mobile Hub
  C. AWS Lambda

  ---

  Explanation/Reference:

  AWS provides a set of fully managed services that you can use to build and run serverless applications. Serverless applications don't require provisioning, maintaining, and administering servers for backend components such as compute, databases, storage, stream processing, message queueing, and more. You also no longer need to worry about ensuring application fault tolerance and availability. Instead, AWS handles all of these capabilities for you. Serverless platform includes: AWS lambda, Amazon S3, DynamoDB, API gateway, Amazon SNS, AWS step functions, Amazon kinesis and developing tools and services.

  Reference: https://aws.amazon.com/serverless/

• Question 1332:

  A newly created IAM user has no IAM policy attached.

  What will happen when the user logs in and attempts to view the AWS resources in the account?

  A. All AWS services will be read-only access by default.
  B. Access to all AWS resources will be denied.
  C. Access to the AWS billing services will be allowed.
  D. Access to AWS resources will be allowed through the AWS CLI.
  B. Access to all AWS resources will be denied.

  ---

  Explanation/Reference:

  B. Access to all AWS resources will be denied.

  When a newly created IAM user has no IAM policy attached, the user will not have any permissions to access AWS resources. By default, a user without any permissions will not be able to perform any actions or see any resources in the account. The user will receive access denied errors when attempting to view or interact with any resources in the account.

• Question 1333:

  Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)?

  A. AWS Basic Support
  B. AWS Developer Support
  C. AWS Business Support
  D. AWS Enterprise Support
  D. AWS Enterprise Support

• Question 1334:

  A company has an application workload that is stateless by design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

  A. On-Demand Instances
  B. Spot Instances
  C. Reserved Instances
  D. Dedicated Instances
  B. Spot Instances

  ---

  Explanation/Reference:

  Reference: https://developer.ibm.com/recipes/tutorials/making-the-most-of-aws-spot-instances-5-best-practices/

• Question 1335:

  A developer creates an AWS Lambda function to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic All message content must be encrypted in transit and at rest between Lambda and Amazon SNS.

  A part of the Lambda execution role is as follows:

  

  Which combination of steps should the developer take to meet these requirements? (Select TWO.)

  A. Enable server-side encryption on the SNS topic
  B. Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "true" as the condition.
  C. Create a VPC endpoint for Amazon SNS
  D. Add a StringEquals condition of "sns Protocol" "https" to the Lambda execution role
  E. Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "false" as the condition.
  A. Enable server-side encryption on the SNS topic
  E. Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "false" as the condition.

• Question 1336:

  Which combination of steps will enable multi-factor authentication (MFA) on an AWS account? (Select TWO.)

  A. Contact AWS Support to initiate MFA activation.
  B. Activate AWS Shield on an MFA-compatible device.
  C. Acquire an MFA-compatible device.
  D. Activate the MFA device by using Amazon GuardDuty.
  E. Activate the MFA device in the IAM console or by using the AWS CLI.
  B. Activate AWS Shield on an MFA-compatible device.
  C. Acquire an MFA-compatible device.

  ---

  Explanation/Reference:

  AWS Multi-Factor Authentication (MFA) is a simple best practice that adds an extra layer of protection on top of your user name and password. With MFA enabled, when a user signs in to an AWS website, they will be prompted for their user name and password (the first factor--what they know), as well as for an authentication response from their AWS MFA device (the second factor--what they have). Taken together, these multiple factors provide increased security for your AWS account settings and resources.

• Question 1337:

  How many Availability Zones should compute resources be provisioned across to achieve high availability?

  A. A minimum of one
  B. A minimum of two
  C. A minimum of three
  D. A minimum of four or more
  B. A minimum of two

• Question 1338:

  Which of the following is a fully managed graph database service on AWS?

  A. Amazon Aurora
  B. Amazon FSx
  C. Amazon DynamoDB
  D. Amazon Neptune
  C. Amazon DynamoDB

• Question 1339:

  A company's ecommerce website is experiencing sudden and significant traffic changes that are causing performance problems in the company database. Users report that attempts to access the website are taking too long. A developer needs to implement a caching layer by using Amazon ElastiCache. The website must be responsive, no matter which product a user views Updates to product information and prices must be strongly consistent. Which cache-writing strategy will meet these requirements?

  A. Write to the cache directly Synchronize the backend later
  B. Write to the backend first Wait for the cache to expire
  C. Write to the cache and the backend at the same time
  D. Write to the backend first. Then update the TTL of the item in the cache=
  C. Write to the cache and the backend at the same time

• Question 1340:

  A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously. Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?

  A. AWS Graviton processor
  B. Dedicated Hosts
  C. EC2 Instance Savings Plans
  D. Amazon EC2 Auto Scaling instances
  C. EC2 Instance Savings Plans