Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1521:

  Which of the following IT tasks does AWS perform to offload a company's IT resource management responsibilities? (Select TWO.)

  A. Configuring operating system firewalls

  B. Setting up access controls for data

  C. Backing up databases

  D. Configuring database user accounts

  E. Installing operating systems

  Correct Answer: CE

• Question 1522:

  Which of the following should be considered when performing a Total Cost of Ownership (TCO) analysis?

  A. Currency fluctuations

  B. Data center overhead

  C. Data security model

  D. Network port utilization

  Correct Answer: B

• Question 1523:

  A company's procurement department wants volume discounts on AWS services for the company, but numerous departments have separate AWS accounts.

  Which AWS service or tool can the company use to receive volume discounts across multiple AWS accounts?

  A. Cost Explorer

  B. AWS Budgets

  C. AWS Cost and Usage Report

  D. AWS Organizations

  Correct Answer: D

• Question 1524:

  Which AWS service or feature can be used to monitor for potential disk write spikes on a system running on Amazon EC2?

  A. AWS CloudTrail

  B. AWS Personal Health Dashboard

  C. AWS Trusted Advisor

  D. Amazon CloudWatch

  Correct Answer: D

• Question 1525:

  A company is running a self-managed Oracle database directly on Amazon EC2 for its steady-state database. The company wants to reduce compute costs. Which option should the company use to maximize savings over a 3-year term?

  A. EC2 Dedicated Instances

  B. EC2 Spot Instances

  C. EC2 Reserved Instances

  D. EC2 On-Demand Instances

  Correct Answer: C

  Reference: https://aws.amazon.com/choosing-a-cloud-platform/

• Question 1526:

  Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (Pll) and user credential data?

  A. Amazon GuardDuty

  B. Amazon Inspector

  C. Amazon Macie

  D. AWS Shield

  Correct Answer: C

• Question 1527:

  What is an 1AM best practice for AWS account root user access keys?

  A. Delete all root user access keys, if possible.

  B. Use root user credentials to access sensitive information stored on AWS.

  C. Allow the system administrator group to use the root user credentials for daily access.

  D. Use root user credentials to access production database instances.

  Correct Answer: A

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

• Question 1528:

  Which security practices are the customer's responsibility under the AWS shared responsibility model? (Select TWO.)

  A. Rotation of 1AM access keys

  B. Patching of Amazon RDS instances

  C. Physical access to a data center

  D. Encryption of Amazon Elastic Block Store (Amazon EBS) volumes

  E. Decommissioning of storage devices

  Correct Answer: CE

• Question 1529:

  Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Select TWO.)

  A. Amazon Macie

  B. AWS Certificate Manager

  C. AWS Key Management Service (AWS KMS)

  D. AWS Secrets Manager

  E. AWS CloudHSM

  Correct Answer: CE

• Question 1530:

  Which AWS service or feature allows a user to set up consolidated billing?

  A. AWS Billing Management Console

  B. AWS Organizations

  C. AWS Cost and Usage Report

  D. AWS Systems Manager

  Correct Answer: B

  Reference: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html