Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1571:

  A developer uses a single AWS CloudFormation template to configure the test environment and the production environment for an application The developer handles environment- specific requirements in the CloudFormation template.

  The developer decides to update the Amazon EC2 Auto Scaling launch template with new Amazon Machine Images (AMIs) for each environment The CloudFormation update for the new AMIs is successful in the test environment but the

  update fails in the production environment.

  What are the possible causes of the CloudFormation update failure in the production environment? (Select TWO )

  A. The new AMIs do not fulfill the specified conditions in the CloudFormation template
  B. The service quota for the number of EC2 vCPUs in the AWS Region has been exceeded. .
  C. The security group that is specified in the CloudFormation template does not exist
  D. CloudFormation does not recognize the template change as an update
  E. CloudFormation does not have sufficient 1AM permissions to make the changes
  A. The new AMIs do not fulfill the specified conditions in the CloudFormation template
  B. The service quota for the number of EC2 vCPUs in the AWS Region has been exceeded. .

• Question 1572:

  A company plans to create a data lake that uses Amazon S3. Which factor will have the MOST effect on cost?

  A. The selection of S3 storage tiers
  B. Charges to transfer existing data into Amazon S3
  C. The addition of S3 bucket policies
  D. S3 ingest fees for each request
  A. The selection of S3 storage tiers

  ---

  Explanation/Reference:

  The storage class used in Amazon S3 can certainly have an impact on the cost of a data lake, as different storage classes have different pricing tiers. For example, using the Glacier storage class for infrequently accessed data can be much cheaper than using the Standard storage class for frequently accessed data. However, in most cases, the amount of data stored will have a larger impact on the overall cost than the storage class used. This is because storage usage is generally the primary driver of cost in an S3-based data lake, regardless of the storage class. Therefore, it is important to carefully monitor and manage the amount of data being stored in the S3 bucket to keep costs under control.

• Question 1573:

  Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Choose two.)

  A. Amazon CloudFront distributions
  B. Amazon Route 53
  C. Security Groups
  D. Subnets
  E. Elastic Load Balancing
  C. Security Groups
  D. Subnets

  ---

  Explanation/Reference:

  Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. You have complete control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways. You can use both IPv4 and IPv6 in your VPC for secure and easy access to resources and applications. You can easily customize the network configuration for your Amazon VPC. For example, you can create a public-facing subnet for your web servers that has access to the Internet, and place your backend systems such as databases or application servers in a private-facing subnet with no Internet access. You can leverage multiple layers of security, including security groups and network access control lists, to help control access to Amazon EC2 instances in each subnet.

  Reference: https://aws.amazon.com/vpc/

• Question 1574:

  A company's user base needs to remotely access virtual desktop computers from the internet. Which AWS service provides this functionality?

  A. Amazon Connect
  B. Amazon Cognito
  C. Amazon Workspaces
  D. Amazon AppStream 2.0
  C. Amazon Workspaces

  ---

  Explanation/Reference:

  C. Amazon WorkSpaces.The AWS service that provides the functionality of remotely accessing virtual desktop computers from the internet is Amazon WorkSpaces. Amazon WorkSpaces is a managed, secure cloud-based virtual desktop infrastructure (VDI) that allows users to access their desktop applications and documents from anywhere, on any supported device. Amazon Connect is a cloud-based contact center service, Amazon Cognito is a user authentication and identity management service, and Amazon AppStream 2.0 is a fully managed application streaming service.

• Question 1575:

  A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third- party provider. Which AWS service should the company use to meet these requirements?

  A. AWS Single Sign-On
  B. AWS Signer
  C. Amazon Cognito
  D. AWS Directory Service
  C. Amazon Cognito

  ---

  Explanation/Reference:

  Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

• Question 1576:

  Which AWS service or tool inspects a user's AWS environment and makes recommendations for cost savings and system performance improvements?

  A. Cost Explorer
  B. AWS Trusted Advisor
  C. Amazon Inspector
  D. AWS Budgets
  B. AWS Trusted Advisor

• Question 1577:

  Which AWS service enables companies to deploy an application close to end users?

  A. Amazon CloudFront
  B. AWS Auto Scaling
  C. AWS AppSync
  D. Amazon Route 53
  A. Amazon CloudFront

• Question 1578:

  Which AWS service helps users audit API activity across their AWS account?

  A. AWS CloudTrail
  B. Amazon Inspector
  C. AWSWAF
  D. AWS Config
  A. AWS CloudTrail

• Question 1579:

  Which security credentials are required to run commands by using the AWS Command Line Interface (AWS CLI)?

  A. Access Key ID and Secret Access Key
  B. AWS root user email and password
  C. Amazon Elastic Compute Cloud (Amazon EC2) key pairs
  D. AWS Identity and Access Management (IAM) user name and password
  A. Access Key ID and Secret Access Key

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-quickstart.html

• Question 1580:

  Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated''

  A. Amazon Elastic Block Store (Amazon EBS)
  B. Amazon EC2 instance store
  C. Amazon Elastic File System (Amazon EFS)
  D. Amazon S3
  B. Amazon EC2 instance store