Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1431:

  Which security-related task is the responsibility of the customer in the AWS cloud?

  A. Securing infrastructure at data centers

  B. Maintaining firewall configurations at a hardware level

  C. Maintaining networking among hardware components

  D. Maintaining server side encryption

  Correct Answer: D

  Reference: https://www.missioncloud.com/blog/aws-security-make-sure-your-share-the-responsibility

• Question 1432:

  Which of the following can be used to identify a specific user who stopped an amazon EC2 instance?

  A. AWS CloudTrail

  B. Amazon Inspector

  C. Amazon CloudWatch

  D. VPC Flow Logs

  Correct Answer: A

  With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.html

• Question 1433:

  Which AWS service would identify if unrestricted access to a resource has been allowed by a security group?

  A. AWS Trusted Advisor

  B. Amazon CloudWatch

  C. VPC Flow Logs

  D. AWS CloudTrail

  Correct Answer: A

  Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/best-practice-checklist/

• Question 1434:

  Which AWS service gives users on-demand, self-service access to AWS compliance control reports?

  A. AWS Config

  B. Amazon GuardDuty

  C. AWS Trusted Advisor

  D. AWS Artifact

  Correct Answer: D

  Reference: https://aws.amazon.com/artifact

• Question 1435:

  A user an optimize Amazon EC2 costs by performing which of the following tasks? (Select TWO )

  A. Implementing Auto Scaling group, to add and remove instances based on demand

  B. Creating a policy to restrict IAM users from creating new instances

  C. Setting a budget to limit spending on EC2 instances using AWS Budgets

  D. Purchasing Reserved Instances

  E. Adding EC2 instances to a second AWS Region that is geographically close to the end users

  Correct Answer: AD

• Question 1436:

  Which AWS service provides business analytics that enable users to create and publish interactive dashboards?

  A. Amazon Kinesis

  B. Amazon CloudWatch

  C. AWS X Ray

  D. Amazon QuickSight

  Correct Answer: D

• Question 1437:

  A web developer is concerned that a DDoS attack could target an application.

  Which AWS services or features can help protect against such an attack? (Choose two.)

  A. AWS Shield

  B. AWS CloudTrail

  C. Amazon CloudFront

  D. AWS Support Center

  E. AWS Service Health Dashboard

  Correct Answer: AB

  Reference: https://aws.amazon.com/shield/

• Question 1438:

  A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?

  A. Contact AWS Support.

  B. Download reports from AWS Artifact.

  C. Download reports from AWS Security Hub

  D. Contact an AWS technical account manager (TAM)

  Correct Answer: B

• Question 1439:

  A bank needs to store recordings of calls made to its contact center tor 6 years. The recordings must be accessible within 48 hours from the time they are requested. Which AWS service will provide a secure and cost-effective solution for retaining these files?

  A. Amazon DynamoDB

  B. Amazon S3 Glacier

  C. Amazon Connect

  D. Amazon ElastiCache

  Correct Answer: B

  Reference: https://docs.aws.amazon.com/connect/latest/adminguide/set-up-recordings.html

• Question 1440:

  A workload on AWS will run for the foreseeable future by using a consistent number of Amazon EC2 instances. What pricing model will minimize cost while ensuring that compute resources remain available?

  A. Dedicated Hosts

  B. On-Demand Instances

  C. Spot instances

  D. Reserved Instances

  Correct Answer: D

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-reserved-instances.html