Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1551:

  Which of the following is a fully managed MySQL-compatible database?

  A. Amazon S3

  B. Amazon DynamoDB

  C. Amazon Redshift

  D. Amazon Aurora

  Correct Answer: D

• Question 1552:

  A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes. Which AWS service can be used to meet these requirements?

  A. AWS Trusted Advisor

  B. AWS Config

  C. AWS Resource Access Manager

  D. AWS Systems Manager

  Correct Answer: B

• Question 1553:

  An AWS user wants to proactively detect when an Instance or account might be compromised or if there are threats from attacks. Which AWS service should the user choose?

  A. Amazon GuardDuty

  B. AWSWAF

  C. AWS Shield

  D. Amazon Inspector

  Correct Answer: A

• Question 1554:

  Which AWS service will track user activity on AWS?

  A. Amazon GuardDuty

  B. AWS Trusted Advisor

  C. AWS CloudTrail

  D. Amazon CloudWatch

  Correct Answer: C

  Reference: https://aws.amazon.com/cloudtrail/#:~:text=Track%20user%20activity%20and%20API%20usageandtext=AWS%20CloudTrail%20is%20a%20service,actions%20across%20your%20AWS%20infrastructure.

• Question 1555:

  A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet. Which AWS service or feature can the company use to meet these requirements?

  A. Network ACL

  B. AWS WAF

  C. Route table

  D. Security group

  Correct Answer: D

  Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html

• Question 1556:

  Which of the following are AWS Trusted Advisor support categories? (Choose two.)

  A. Operational excellence

  B. Cost optimization

  C. Security

  D. Well-Architected Framework

  E. Rightsizing

  Correct Answer: BC

  AWS Trusted Advisor Reduce costs, improve performance, improve security

  Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/

• Question 1557:

  Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

  A. Patching of the guest operating system

  B. Security awareness and training

  C. Physical and environmental controls

  D. Development of an IAM password policy

  Correct Answer: C

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/#:~:text=AWS%20responsibility%20%E2%80%9CSecurity%20of%20the,that%20run%20AWS%20Cloud%20services.

• Question 1558:

  A company plans to store sensitive data in an Amazon S3 bucket.

  Which task is the responsibility of AWS?

  A. Activate encryption at rest for the data.

  B. Provide security for the physical infrastructure.

  C. Train the company's employees about cloud security.

  D. Remove personally identifiable information (PII) from the data.

  Correct Answer: A

  Amazon S3 can often house sensitive and confidential information. To help secure your data within Amazon S3, you should be using AWS Key Management Service (AWS KMS) with server-side encryption at rest for Amazon S3. It is also important that you secure the S3 buckets so that you only allow access to the developers and users who require that access.

  Reference: https://aws.amazon.com/blogs/security/strengthen-the-security-of-sensitive-data-stored-in-amazon-s3-by-using-additional-aws-services/

• Question 1559:

  Which options are available to a user who wants to contact AWS Support? (Choose two.)

  A. Create an email case in the AWS Support Center.

  B. Visit a local AWS Support Center.

  C. Use live chat functionality.

  D. Call the customer service phone number.

  E. Use the video conference functionality of the AWS Support console.

  Correct Answer: CD

  If you select Chat, you can chat online with a representative from AWS Support.

  If you select Phone, you're prompted for a callback number. You receive a call from AWS Support as soon as you create the case.

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/aws-phone-support/

• Question 1560:

  A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user. What should the company do to meet these data storage requirements with the LEAST amount of operational overhead?

  A. Use Amazon EC2 in multiple Regions to host separate databases.

  B. Use Amazon RDS cross-Region replication.

  C. Use Amazon DynamoDB global tables.

  D. Use AWS Database Migration Service (AWS DMS).

  Correct Answer: C

  Hundreds of thousands of AWS customers have chosen DynamoDB as their key-value and document database for mobile, web, gaming, ad tech, IoT, and other applications that need low-latency data access at any scale. Create a new table for your application and let DynamoDB handle the rest.

  Reference: https://aws.amazon.com/dynamodb/