Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1341:

  A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional What is the best cloud architecture to address this consistently growing demand?

  A. Run the application on a bigger EC2 instance size.
  B. Switch to an EC2 instance family that better matches batch requirements
  C. Distribute the application across multiple EC2 instances and run the workload in parallel.
  D. Run the application on a bare metal EC2 instance.
  C. Distribute the application across multiple EC2 instances and run the workload in parallel.

• Question 1342:

  What is an AWS Region?

  A. A broad set of global, cloud-based products that include compute, storage, and databases
  B. A physical location around the world where data centers are clustered
  C. One or more discrete data centers with redundant power, networking, and connectivity
  D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users
  B. A physical location around the world where data centers are clustered

  ---

  Explanation/Reference:

  AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of multiple, isolated, and physically separate AZs within a geographic area.

• Question 1343:

  Which AWS service can be used to decouple applications?

  A. AWS Config
  B. Amazon Simple Queue Service (Amazon SQS)
  C. AWS Batch
  D. Amazon Simple Email Service (Amazon SES)
  B. Amazon Simple Queue Service (Amazon SQS)

• Question 1344:

  A company has a Java web application. The company wants to use auto deployment to create the AWS environment and deploy new versions of its application. Which AWS service will meet these requirements?

  A. AWS Auto Scaling
  B. AWS Elastic Beanstalk
  C. AWS Control Tower
  D. Amazon EC2
  B. AWS Elastic Beanstalk

  ---

  Explanation/Reference:

  You can simply upload your code and Elastic Beanstalk automatically handles the deployment. Reference: https://aws.amazon.com/elasticbeanstalk/

• Question 1345:

  Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

  A. Sustainability
  B. Cost optimization
  C. Operational excellence
  D. Reliability
  B. Cost optimization

  ---

  Explanation/Reference:

  B. Cost optimization

  The AWS Well-Architected Framework is a set of best practices and guidelines that helps customers design and operate their workloads on AWS. The framework consists of five pillars:

  -

  Operational Excellence: focuses on the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures.

  -

  Security: focuses on protecting information, systems, and assets while delivering business value through risk assessments and mitigation strategies.

  -

  Reliability: focuses on the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues

  -

  Performance Efficiency: focuses on using computing resources effectively and making tradeoffs between cost and performance.

  -

  Cost optimization: focuses on the return on investment of moving into the AWS Cloud.

• Question 1346:

  An administrator needs to rapidly deploy a popular IT solution and start using it immediately. Where can the administrator find assistance?

  A. AWS Well-Architected Framework documentation
  B. Amazon CloudFront
  C. AWS CodeCommit
  D. AWS Quick Start reference deployments
  D. AWS Quick Start reference deployments

  ---

  Explanation/Reference:

  Quick Starts are built by AWS solutions architects and partners to help you deploy popular technologies on AWS, based on AWS best practices for security and high availability. These accelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.

  Reference: https://aws.amazon.com/quickstart/?quickstart-all.sort-by=item.additionalFields.updateDateandquickstart-all.sort-order=desc

• Question 1347:

  Which of the following are AWS security best practices for using AWS Identity and Access Management (IAM) to manage an AWS account root user? (Choose two.)

  A. Set up multi-factor authentication (MFA) for the root user.
  B. Remove all IAM policies from the root user.
  C. Delete the root user access keys.
  D. Use the root user for daily tasks.
  E. Assign a read-only access policy to the root user.
  A. Set up multi-factor authentication (MFA) for the root user.
  E. Assign a read-only access policy to the root user.

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

• Question 1348:

  Which AWS Support plan is recommended for business and mission-critical workloads in AWS environments?

  A. AWS Business Support
  B. AWS Enterprise Support
  C. AWS Basic Support
  D. AWS Developer Support
  A. AWS Business Support

• Question 1349:

  Which AWS services can be used as infrastructure automation tools? (Choose two.)

  A. AWS CloudFormation
  B. Amazon CloudFront
  C. AWS Batch
  D. AWS OpsWorks
  E. Amazon QuickSight
  A. AWS CloudFormation
  D. AWS OpsWorks

  ---

  Explanation/Reference:

  Reference: https://blog.newrelic.com/engineering/best-cloud-infrastructure-automation-tools/

• Question 1350:

  Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting?

  A. AWS WAF
  B. AWS Shield Advanced
  C. Amazon GuardDuty
  D. Amazon Detective
  A. AWS WAF

  ---

  Explanation/Reference:

  AWS WAF helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.