Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1441:

  A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

  A. Amazon CloudWatch

  B. Amazon Inspector

  C. AWS CloudTrail

  D. AWS 1AM

  Correct Answer: C

  Reference: https://aws.amazon.com/cloudtrail/

• Question 1442:

  A company wants to be nodded when its AWS Cloud costs or usage exceed defined thresholds. Which AWS service will support these requirements?

  A. AWS Budgets

  B. Cost Explorer

  C. AWS CloudTrail

  D. Amazon Made

  Correct Answer: A

• Question 1443:

  A user can increase operational efficiency in the AWS Cloud by:

  A. leveraging AWS managed services.

  B. right-sizing AWS infrastructure.

  C. manually creating all necessary resources.

  D. managing their own software licenses.

  Correct Answer: A

  Reference: https://www.ibexlabs.com/improve-operational-efficiency-via-digital-transformation-on-aws/

• Question 1444:

  Which tool can be used to identity scheduled changes to the AWS infrastructure?

  A. AWS Personal Health Dashboard

  B. AWS Trusted Advisor

  C. Billing Dashboard

  D. AWS Config

  Correct Answer: B

• Question 1445:

  Which statement is true about AWS global infrastructure?

  A. Availability Zones can span multiple AWS Regions.

  B. A VPC can have different subnets in different AWS Regions.

  C. AWS Regions consist of multiple Availability Zones.

  D. A single subnet can span multiple Availability Zones.

  Correct Answer: C

  Reference: https://digitalcloud.training/certification-training/aws-certified-cloud-practitioner/aws-global-infrastructure/

• Question 1446:

  An external auditor has requested that a company provide a list of all its 1AM users, including the status of users' credentials and access keys What is the SIMPLEST way to provide this information?

  A. Create an 1AM user account for the auditor, granting the auditor administrator permissions

  B. Take a screenshot of each user's page in the AWS Management Console, then provide the screenshots to the auditor

  C. Download the 1AM credential report then provide the report to the auditor.

  D. Download the AWS Trusted Advisor report, then provide the report to the auditor

  Correct Answer: C

• Question 1447:

  According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

  A. Hard code an 1AM user's secret key and access key directly in the application, and upload the file.

  B. Store the 1AM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the tile.

  C. Have the EC2 instance assume a role to obtain the privileges to upload the file.

  D. Modify the S3 bucket policy so that any service can upload to it at any time

  Correct Answer: C

• Question 1448:

  The AWS global infrastructure consists of Regions, Availability Zones and what else?

  A. VPCs

  B. Data centers

  C. Dark fiber network links

  D. Edge locations

  Correct Answer: B

  Reference: https://www.inqdo.com/aws-explained-global-infrastructure/?lang=en

• Question 1449:

  Which AWS services can be used to set up NoSQL databases? (Select TWO.)

  A. Amazon Redshilt

  B. Amazon Aurora

  C. Amazon DynamoDB

  D. Amazon S3

  E. Amazon DocumentDB (with MongoDB compalibility)

  Correct Answer: CE

• Question 1450:

  Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?

  A. Cost Explorer

  B. AWS Budgets

  C. AWS Cost and Usage Report

  D. AWS CloudTrail

  Correct Answer: B

  Reference: https://aws.amazon.com/getting-started/hands-on/control-your-costs-free-tier-budgets/