Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1561:

  A company has infrastructure in one AWS Region and is expanding operations to a second AWS Region. The company is using the same AWS CloudFormation template in the second Region that the company uses in the original Region. The company attempts to launch Amazon EC2 On-Demand Instances in the second Region and receives error messages.

  What could cause these error messages?

  A. A new EC2 key pair has not been created for the EC2 instances.

  B. The requested EC2 instance types are not available in the second Region.

  C. The company cannot operate in a second Region until it updates its AWS contract.

  D. The company has not configured AWS Budgets to monitor the budget for the EC2 instances.

  Correct Answer: A

  The key pair does not exist. Launching EC2 instance failed. Reference: https://docs.aws.amazon.com/autoscaling/ec2/userguide/ts-as-instancelaunchfailure.html

• Question 1562:

  Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

  A. AWS CLI

  B. AWS Developer Center

  C. AWS Cloud Development Kit (AWS CDK)

  D. AWS CodeStar

  Correct Answer: C

  The AWS Cloud Development Kit (AWS CDK) is an open source software development framework to define your cloud application resources using familiar programming languages.

  Provisioning cloud applications can be a challenging process that requires you to perform manual actions, write custom scripts, maintain templates, or learn domain-specific languages. AWS CDK uses the familiarity and expressive power of programming languages for modeling your applications. It provides you with high-level components called constructs that preconfigure cloud resources with proven defaults, so you can build cloud applications without needing to be an expert. AWS CDK provisions your resources in a safe, repeatable manner through AWS CloudFormation.

  Reference: https://aws.amazon.com/cdk/

• Question 1563:

  A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases. Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

  A. Elastic Load Balancing

  B. Amazon EC2 Auto Scaling

  C. AWS App2Container (A2C)

  D. AWS Systems Manager

  Correct Answer: B

• Question 1564:

  Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?

  A. Running Amazon GuardDuty

  B. Using AWS Artifact

  C. Creating an AWS Support ticket

  D. Evaluating AWS CloudTrail logs

  Correct Answer: B

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. Reference: https://aws.amazon.com/artifact/

• Question 1565:

  A company has a Java web application. The company wants to use auto deployment to create the AWS environment and deploy new versions of its application. Which AWS service will meet these requirements?

  A. AWS Auto Scaling

  B. AWS Elastic Beanstalk

  C. AWS Control Tower

  D. Amazon EC2

  Correct Answer: B

  You can simply upload your code and Elastic Beanstalk automatically handles the deployment. Reference: https://aws.amazon.com/elasticbeanstalk/

• Question 1566:

  Which AWS service or feature provides an online, managed software catalog that helps users purchase and deploy third-party software?

  A. AWS Support

  B. AWS Marketplace

  C. Amazon EC2 private Amazon Machine Images (AMIs)

  D. AWS reseller programs

  Correct Answer: B

  AWS Marketplace is a curated digital catalog that makes it easy for customers to find, buy, deploy, and manage the third-party software. Reference: https://aws.amazon.com/marketplace/campaigns/software-procurement

• Question 1567:

  A network engineer needs to establish a dedicated 10 Gbps network connection from an on-premises environment to AWS. Which AWS service or feature should the engineer use?

  A. Amazon Route 53

  B. AWS Direct Connect

  C. AWS PrivateLink

  D. AWS VPN

  Correct Answer: B

  AWS Direct Connect can create a dedicated network connection between your premises and AWS. Reference: https://aws.amazon.com/directconnect/

• Question 1568:

  Which AWS storage service is designed to transfer petabytes of data in and out of the cloud?

  A. AWS Storage Gateway

  B. Amazon S3 Glacier Deep Archive

  C. Amazon Lightsail

  D. AWS Snowball

  Correct Answer: D

  Reference: https://docs.aws.amazon.com/snowball/latest/ug/transfer-petabytes.html

• Question 1569:

  Which service provides a user the ability to warehouse data in the AWS Cloud?

  A. Amazon EFS

  B. Amazon Redshift

  C. Amazon RDS

  D. Amazon VPC

  Correct Answer: B

  Reference: https://aws.amazon.com/redshift/

• Question 1570:

  A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet. Which AWS service will meet these requirements MOST cost-effectively?

  A. Amazon Elastic Block Store (Amazon EBS)

  B. Amazon S3

  C. Amazon Elastic File System (Amazon EFS)

  D. AWS Storage Gateway

  Correct Answer: B

  You can encrypt data using any encryption method you want, and then upload the encrypted data using the Amazon Simple Storage Service (Amazon S3) APIs. Most common application languages include cryptographic libraries that allow you to perform encryption in your applications. Two commonly available open source tools are Bouncy Castle and OpenSSL. Once you have encrypted an object and safely stored the key in your KMI, the encrypted object can be uploaded to Amazon S3 directly with a PUT request.

  Reference: https://d0.awsstatic.com/whitepapers/aws-securing-data-at-rest-with-encryption.pdf