Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1561:

  A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speed. Which AWS service meets these requirements?

  A. Amazon CloudFront
  B. Elastic Load Balancing
  C. Amazon S3
  D. Amazon Elastic Transcoder
  A. Amazon CloudFront

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/cloudfront/

• Question 1562:

  Which AWS hybrid storage service enables a user's on-premises applications to seamlessly use AWS Cloud storage?

  A. AWS Backup
  B. Amazon Connect
  C. AWS Direct Connect
  D. AWS Storage Gateway
  D. AWS Storage Gateway

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/storagegateway/?whats-new-cards.sort-by=item.additionalFields.postDateTimeandwhats-new-cards.sort-order=desc

• Question 1563:

  Which AWS service provides the ability to manage infrastructure as code?

  A. AWS CodePipeline
  B. AWS CodeDeploy
  C. AWS Direct Connect
  D. AWS CloudFormation
  D. AWS CloudFormation

  ---

  Explanation/Reference:

  AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment. CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. This file serves as the single source of truth for your cloud environment.

  Reference: https://aws.amazon.com/cloudformation/

• Question 1564:

  A company hosts a web application on Amazon EC2 instances. The application requires credentials so that it can access other AWS services.

  Which feature should the company use the provide this access?

  A. IAM users
  B. IAM groups
  C. IAM roles
  D. Multi-factor authentication (MFA)
  D. Multi-factor authentication (MFA)

• Question 1565:

  Which service is best for storing common database query results, which helps to alleviate database access load?

  A. Amazon Machine Learning
  B. Amazon SQS
  C. Amazon ElastiCache
  D. Amazon EC2 Instance Store
  C. Amazon ElastiCache

  ---

  Explanation/Reference:

  Amazon ElastiCache for Redis is a great choice for implementing a highly available, distributed, and secure in-memory cache to decrease access latency, increase throughput, and ease the load off your relational or NoSQL databases and applications. ElastiCache can serve frequently requested items at sub-millisecond response times, and enables you to easily scale for higher loads without growing the costlier backend databases. Database query results caching, persistent session caching, and full-page caching are all popular examples of caching with ElastiCache for Redis.

  Reference: https://aws.amazon.com/products/databases/real-time-apps-elasticache-for-redis/

• Question 1566:

  What can be used to automate and manage secure, well-architected, multi-account AWS environments?

  A. AWS shared responsibility model
  B. AWS Control Tower
  C. AWS Security Hub
  D. AWS Well-Architected Tool
  B. AWS Control Tower

  ---

  Explanation/Reference:

  Control Tower automates the process of setting up a new baseline multi-account AWS environment that is secure, well-architected, and ready to use. Control Tower incorporates the knowledge that AWS Professional Service has gained over

  the course of thousands of successful customer engagements.

  Reference: https://aws.amazon.com/blogs/aws/aws-control-tower-set-up-govern-a-multi-account-aws-environment/

• Question 1567:

  Which AWS Cloud design principle is a company using when the company implements AWS CloudTrail?

  A. Activate traceability.
  B. Use serverless compute architectures.
  C. Perform operations as code.
  D. Go global in minutes.
  A. Activate traceability.

  ---

  Explanation/Reference:

  CloudTrail, activates traceability to know who did what on what.

• Question 1568:

  A company must process a large amount of data from social media accounts by making graphical queries with high throughput. Which AWS service will help the company design a cloud architecture that will meet these requirements?

  A. Amazon RDS
  B. Amazon DynamoDB
  C. Amazon Neptune
  D. Amazon Redshift
  C. Amazon Neptune

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/neptune/

• Question 1569:

  For which auditing process does AWS have sole responsibility?

  A. AWS IAM policies
  B. Physical security
  C. Amazon S3 bucket policies
  D. AWS CloudTrail Logs
  B. Physical security

• Question 1570:

  A user wants to control AWS services by using the AWS CLI.

  What are the MINIMUM security credentials that the user needs to achieve this goal?

  A. AWS account user name and password
  B. Multi-factor authentication (MFA)
  C. Access keys
  D. Key pairs
  C. Access keys

  ---

  Explanation/Reference:

  C. Access keys

  The minimum security credentials that a user needs to control AWS services by using the AWS CLI are access keys. Access keys consist of an access key ID and a secret access key, which are used to sign programmatic requests that the user makes to AWS services. To create access keys, the user must have an AWS account and an IAM user that the user can use to sign in to the AWS Management Console, and the user must also have permissions to create and manage access keys. Once the user

  has access keys, the user can configure the AWS CLI with them, and the user will be able to make programmatic requests to AWS services.

  It's worth mentioning that AWS recommends that you use IAM users instead of the root user to interact with AWS, and that you use access keys in conjunction with multi-factor authentication (MFA) for added security.