Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 131:

  Which AWS service is always provided at no charge?

  A. Amazon S3

  B. AWS Identity and Access Management (IAM)

  C. Elastic Load Balancers

  D. AWS WAF

  Correct Answer: B

  From: https://aws.amazon.com/premiumsupport/knowledge-center/iam-intro/#:~:text=You%20can% 20interact%20with%20IAM,offered%20at%20no%20additional%20charge. "You can interact with IAM through the web-based IAM console, the AWS Command Line Interface, or the AWS API or SDKs. IAM is offered at no additional charge. "

• Question 132:

  A company needs to set up a petabyte-scale data warehouse in the AWS Cloud. Which AWS service will meet this requirement?

  A. Amazon DynamoDB

  B. Amazon RDS

  C. Amazon Redshift

  D. Amazon ElastiCache

  Correct Answer: C

  Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse service that makes it simple and cost-effective to efficiently analyze all your data using your existing business intelligence tools.

• Question 133:

  Why is an AWS Well-Architected review a critical part of the cloud design process?

  A. A Well-Architected review is mandatory before a workload can run on AWS.

  B. A Well-Architected review helps identify design gaps and helps evaluate design decisions and related documents.

  C. A Well-Architected review is an audit mechanism that is a part of requirements for service level agreements.

  D. A Well-Architected review eliminates the need for ongoing auditing and compliance tests.

  Correct Answer: B

  https://docs.aws.amazon.com/wellarchitected/latest/framework/the-review-process.html

• Question 134:

  A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month. Which AWS tool should the company use to meet these requirements?

  A. Reserved Instance utilization and coverage reports

  B. Savings Plans utilization reports

  C. AWS Budgets reports

  D. AWS Cost and Usage Reports

  Correct Answer: D

  Price calculator- for cost estimation Cost explorer- for current and past cost and usage in graphs Cost and usage reports- for reports

• Question 135:

  A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the operating system of the server where the DB instance runs. What is the company's responsibility in this situation, according to the AWS shared responsibility model?

  A. Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system.

  B. Open a support case and request that AWS patch the DB instance operating system.

  C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for the DB instance.

  D. Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.

  Correct Answer: D

• Question 136:

  Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?

  A. Both AWS and the customer

  B. The customer only

  C. The EC2 hardware manufacturer

  D. AWS only

  Correct Answer: D

  *D* Straight from the Docks "Security and Compliance is a shared responsibility between AWS and the customer. This shared model can help relieve the customer's operational burden as AWS operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates. The customer assumes responsibility and management of the guest operating system (including updates and security patches)"

  https://aws.amazon.com/compliance/shared-responsibility-model/#:~:text=Security%20and% 20Compliance,and%20security%20patches)

• Question 137:

  Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?

  A. Create annotated documentation.

  B. Anticipate failure.

  C. Ensure performance efficiency.

  D. Optimize costs.

  Correct Answer: B

  Answer is B, since part of the operational excellence is to anticipate failures by running and managing along with monitoring production workloads. Also continuous improvement is part of Operational Excellence.

• Question 138:

  A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days. Which AWS service should the company use to accomplish this migration?

  A. Amazon S3 Glacier

  B. AWS Database Migration Service (AWS DMS)

  C. AWS Snowball

  D. AWS Direct Connect

  Correct Answer: C

  C. snowball

  AWS Snowball is a petabyte-scale data transport service that uses secure devices to transfer large amounts of data into and out of the AWS Cloud.

  Amazon S3 Glacier (S3 Glacier) is a secure and durable service for low-cost data archiving and long-term backup.

  With S3 Glacier, you can store your data cost effectively for months, years, or even decades. S3 Glacier helps you offload the administrative burdens of operating and scaling storage to AWS, so you don't have to worry about capacity planning, hardware provisioning, data replication, hardware failure detection and recovery, or time-consuming hardware migration

  AWS Database Migration Service (AWS DMS) is a cloud service that makes it easy to migrate relational databases, data warehouses, NoSQL databases, and other types of data stores. You can use AWS DMS to migrate your data into the AWS Cloud or between combinations of cloud and on-premises setups.

• Question 139:

  A company is planning an infrastructure deployment to the AWS Cloud. Before the deployment, the company wants a cost estimate for running the infrastructure. Which AWS service or feature can provide this information?

  A. Cost Explorer

  B. AWS Trusted Advisor

  C. AWS Cost and Usage Report

  D. AWS Pricing Calculator

  Correct Answer: D

  D. pricing calculator-estimate cost cost explore--graph--show cost, usage over time cost and usage report-- tracks your AWS usage and provides estimated charges associated with your account.

• Question 140:

  Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources?

  A. Objects; access control lists (ACLs)

  B. Subnets; internet gateways

  C. Access policies; buckets

  D. Groups; roles

  Correct Answer: B