Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1361:

  An application is receiving SQL injection attacks from multiple external resources. Which AWS service or feature can help automate mitigation against these attacks?

  A. AWS WAF

  B. Security groups

  C. Elastic Load Balancer

  D. Network ACL

  Correct Answer: A

  Reference: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-sqli-match.html

• Question 1362:

  Which AWS cloud architecture principle states that systems should reduce interdependences?

  A. Scalability

  B. Services not servers

  C. Removing single points of failure

  D. Loose coupling

  Correct Answer: D

• Question 1363:

  Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?

  A. AWS Direct Connect

  B. VPC peering

  C. AWS VPN

  D. Amazon Route 53

  Correct Answer: A

  Reference: https://www.stratoscale.com/blog/cloud/build-secure-tunnel-on-prem-data-center-amazon-cloud/#:~:text=AWS%20Direct%20Connect%20allows%20you,that%20provide%20connectivity%20to%20AWS.

• Question 1364:

  Which AWS services help to improve application performance by reducing latency while accessing content globally? (Select TWO.)

  A. Amazon CloudFront

  B. AWS VPN

  C. AWS Direct Connect

  D. AWS Global Accelerator

  E. Amazon S3 Glacier

  Correct Answer: AD

  Reference: https://aws.amazon.com/blogs/networking-and-content-delivery/achieve-up-to-60-better-performance-for-internet-traffic-with-aws-global-accelerator/

• Question 1365:

  When a user wants to utilize their existing per-socket per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

  A. Spot Instances

  B. Dedicated instances

  C. Dedicated Hosts

  D. Reserved Instances

  Correct Answer: C

• Question 1366:

  Which features and benefits does the AWS Organizations provide? (Select TWO)

  A. Establishing real-time communications between members of an internal team

  B. Facilitating the use of NoSQL databases

  C. Providing automated security checks

  D. Imptementing consolidated billing

  E. Enforcing the governance of AWS accounts

  Correct Answer: DE

• Question 1367:

  Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?

  A. High availability

  B. Decoupled architecture

  C. Resilience

  D. Elasticity

  Correct Answer: D

• Question 1368:

  A company is looking for a way to encrypt data stored on Amazon S3. Which AWS managed service can be used to help to accomplish this?

  A. AWS Certificate Manager (ACM)

  B. AWS Secrets Manager

  C. AWS Resource Access Manager

  D. AWS Key Management Service (AWS KMS)

  Correct Answer: D

  Reference: https://www.nakivo.com/blog/amazon-s3-encryption-configuration-overview/

• Question 1369:

  A company with AWS Enterprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices.

  Which AWS tool or resource is available to accomplish these goals?

  A. Resource lagging

  B. AWS Concierge Support team

  C. AWS Abuse team

  D. AWS Support

  Correct Answer: B

• Question 1370:

  A company needs 247 phone, email, and chat access, with a response time of less than 1 hour it a production system has a service interruption. Which AWS Support plan meets these requirements at the LOWEST cost?

  A. Basic

  B. Developer

  C. Business

  D. Enterprise

  Correct Answer: C