Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1491:

  An external auditor needs to verify the compliance and security of the AWS data center facilities where a company's data is stored. How should this request be addressed?

  A. Create a support case using the AWS account root user credentials requesting that a concierge accompany the auditor to the facility.

  B. Contact an AWS technical account manager and request access to the next scheduled facility tour.

  C. Access the AWS Artifact portal and download the required reports to provide to the auditor.

  D. Access the AWS Artifact portal and create an access URL for the auditor to download the required reports,

  Correct Answer: A

• Question 1492:

  Which AWS feature enables users to categorize and track their AWS costs?

  A. Cost Allocation Tags

  B. AWS Trusted Advisor

  C. AWS Price List API

  D. AWS Organizations

  Correct Answer: B

• Question 1493:

  Which AWS service or feature can be used to allow users access to compliance reports as self-service downloads?

  A. AWS Service Catalog

  B. AWS Security Hub

  C. AWS Artifact

  D. AWS Support Center

  Correct Answer: B

• Question 1494:

  Which are customer responsibilities when using Amazon EC2? (Select TWO.)

  A. Underlying hardware maintenance

  B. File-system-level encryption

  C. Guest operating system firewall configuration

  D. Hypervisor-level software patching

  E. Physical security at data center facilities

  Correct Answer: CD

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/?ref=wellarchitected

• Question 1495:

  A company has launched a product that requires private connectivity from an on-premises network to a VPC. Which AWS service or functionality should the company use?

  A. AWS Direct Connect

  B. VPC peering

  C. NAT gateway

  D. Internal gateway

  Correct Answer: D

• Question 1496:

  Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

  A. IAM access and secret keys are static, so there is no need to rotate them

  B. The customer is responsible for rotating keys.

  C. AWS will rotate the keys whenever required.

  D. The AWS Support team will rotate keys when requested by the customer.

  Correct Answer: B

• Question 1497:

  Which of the following services has a primarily encryption-related purpose?

  A. AWS Security Token Service (AWS STS)

  B. Amazon EMR

  C. AWS Key Management Service (AWS KMS)

  D. Amazon Macie

  Correct Answer: C

• Question 1498:

  Which of the following is Amazon Aurora compatible with? (Select TWO.)

  A. MySQL

  B. Microsoft SOL Server

  C. Oracle

  D. PostgreSQL

  E. MahaDB

  Correct Answer: AD

• Question 1499:

  A company is designing a new stateful application to run on AWS. Which design patterns will help reduce risk? (Select TWO.)

  A. Consume compute resources using Amazon EC2 Spot instance types.

  B. Use Amazon S3 with a bucket policy that ensures the least restrictive access to the data.

  C. Separate the database tier from the application tier using Amazon RDS.

  D. Consolidate application resources into one or two large instance types to minimize the number of components to be managed.

  E. Build a microservices-based architecture to break out application services into containers for the application tier.

  Correct Answer: DE

• Question 1500:

  Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization?

  A. Amazon Inspector

  B. AWS CloudTtail

  C. Amazon CloudWatch

  D. AWS Config

  Correct Answer: C