Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1551:

  Which AWS feature or service can be used to capture information about incoming and outgoing traffic in an AWS VPC infrastructure?

  A. AWS Config
  B. VPC Flow Logs
  C. AWS Trusted Advisor
  D. AWS CloudTrail
  B. VPC Flow Logs

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html

• Question 1552:

  Which of the following is an AWS Well-Architected Framework design principle for operational excellence in the AWS Cloud?

  A. Go global in minutes.
  B. Make frequent, small, reversible changes.
  C. Implement a strong foundation of identity and access management.
  D. Stop spending money on hardware infrastructure for data center operations.
  B. Make frequent, small, reversible changes.

  ---

  Explanation/Reference:

  

• Question 1553:

  Which AWS container service will help a user install, operate, and scale the cluster management infrastructure?

  A. Amazon Elastic Container Registry (Amazon ECR)
  B. AWS Elastic Beanstalk
  C. Amazon Elastic Container Service (Amazon ECS)
  D. Amazon Elastic Block Store (Amazon EBS)
  C. Amazon Elastic Container Service (Amazon ECS)

• Question 1554:

  A company's web application requires AWS credentials and authorizations to use an AWS service. Which IAM entity should the company use as best practice?

  A. IAM role
  B. IAM user
  C. IAM group
  D. IAM multi-factor authentication (MFA)
  A. IAM role

  ---

  Explanation/Reference:

  https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html

• Question 1555:

  Which managed AWS service provides real-time guidance on AWS security best practices?

  A. AWS X-Ray
  B. AWS Trusted Advisor
  C. Amazon CloudWatch
  D. AWS Systems Manager
  B. AWS Trusted Advisor

  ---

  Explanation/Reference:

  AWS offers premium services such as AWS Trusted Advisor, which provides real-time guidance to help you reduce cost, increase performance, and improve security. Reference: https://www.ibm.com/downloads/cas/2N40X4PQ

• Question 1556:

  Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Choose two.)

  A. Use manual monitoring.
  B. Use fixed servers.
  C. Implement loose coupling.
  D. Rely on individual components.
  E. Design for scalability.
  C. Implement loose coupling.
  E. Design for scalability.

  ---

  Explanation/Reference:

  Rearchitecting applications involves sweeping change where an old monolithic application is completely revamped according to modern microservices architecture. Using individual components to re-architect a big application is one part of the process. The most important part is to design the application for scalability because the level of investment for a monolithic application can only be justified when resilience and scalability is needed.

  Reference: https://www.architech.ca/re-architect-applications/

• Question 1557:

  Which service provides a user the ability to warehouse data in the AWS Cloud?

  A. Amazon EFS
  B. Amazon Redshift
  C. Amazon RDS
  D. Amazon VPC
  B. Amazon Redshift

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/redshift/

• Question 1558:

  Which AWS services can host PostgreSQL databases? (Select TWO.)

  A. Amazon S3
  B. Amazon Aurora
  C. Amazon EC2
  D. Amazon Elasticsearch Service (Amazon ES)
  E. Amazon Elastic File System (Amazon EFS)
  B. Amazon Aurora
  C. Amazon EC2

• Question 1559:

  Which of the following can be used to identity a specific user who slopped an Amazon EC2 instance?

  A. AWS CloudTrail
  B. Amazon inspector
  C. Amazon CloudWatch
  D. VPC Flow Logs
  A. AWS CloudTrail

• Question 1560:

  Which benefit of the AWS Cloud supports matching the supply of resources with changing workload demands?

  A. Security
  B. Reliability
  C. Elasticity
  D. High availability
  C. Elasticity

  ---

  Explanation/Reference:

  Reference: https://wa.aws.amazon.com/wat.map.en.html