Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1591:

  A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB.

  What is the MOST operationally efficient solution to delegate permissions?

  A. Create an IAM role with the required permissions. Attach the role to the EC2 instance
  B. Create an IAM user and use its access key and secret access key in the application.
  C. Create an IAM user and use its access key and secret access key lo create a CLI profile in the EC2 instance.
  D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.
  A. Create an IAM role with the required permissions. Attach the role to the EC2 instance

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html

• Question 1592:

  Which fully managed AWS service allows a user to bring their own machine teaming algorithm?

  A. Amazon Forecast
  B. AWS Artifact
  C. AWS Data Pipeline
  D. Amazon SageMaker
  D. Amazon SageMaker

• Question 1593:

  A company has refined its workload to use specific AWS services to improve efficiency and reduce cost. Which best practice for cost governance does this example show?

  A. Resource controls
  B. Cost allocation
  C. Architecture optimization
  D. Tagging enforcement
  C. Architecture optimization

  ---

  Explanation/Reference:

  Reference https://d1.awsstatic.com/whitepapers/architecture/AWS-Cost-Optimization-Pillar.pdf

• Question 1594:

  What function do security groups serve related to Amazon Elastic Compute Cloud (Amazon EC2) instance security?

  A. Act as a virtual firewall for the Amazon EC2 instance.
  B. Secure AWS user accounts with AWS Identity and Access Management (IAM) policies.
  C. Provide DDoS protection with AWS Shield.
  D. Use Amazon CloudFront to protect the Amazon EC2 instance.
  A. Act as a virtual firewall for the Amazon EC2 instance.

  ---

  Explanation/Reference:

  AWS Security Groups act like a firewall for your Amazon EC2 instances controlling both inbound and outbound traffic. When you launch an instance on Amazon EC2, you need to assign it to a particular security group. After that, you can set up ports and protocols, which remain open for users and computers over the internet.

  AWS Security Groups are very flexible. You can use the default security group and still customize it according to your liking (although we don't recommend this practice because groups should be named according to their purpose.) Or you can create a security group that you want for your specific applications. To do this, you can write the corresponding code or use the Amazon EC2 console to make the process easier.

  Reference: https://www.threatstack.com/blog/aws-security-groups-what-they-are-and-how-to-get-the-most-out-of-them

• Question 1595:

  Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model?

  A. Operational excellence
  B. Performance efficiency
  C. Reliability
  D. Security
  D. Security

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/apn/the-5-pillars-of-the-aws-well-architected-framework/

• Question 1596:

  A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week. Which solution will meet these requirements?

  A. AWS Direct Connect
  B. Amazon VPC
  C. AWS Site-to-Site VPN
  D. Edge location
  C. AWS Site-to-Site VPN

  ---

  Explanation/Reference:

  A. AWS Direct Connect- according to the documentation this can take several weeks to set up with a local provider.

  B. Amazon VPC- this is primarily used for subnetting internal instances. C. AWS Site-to-Site VPN- can be set up in minutes from branch / data center to aws. D. Edge location- these are mainly content based distribution hubs for end users/ clients.

• Question 1597:

  Which AWS service or feature provides an online, managed software catalog that helps users purchase and deploy third-party software?

  A. AWS Support
  B. AWS Marketplace
  C. Amazon EC2 private Amazon Machine Images (AMIs)
  D. AWS reseller programs
  B. AWS Marketplace

  ---

  Explanation/Reference:

  AWS Marketplace is a curated digital catalog that makes it easy for customers to find, buy, deploy, and manage the third-party software. Reference: https://aws.amazon.com/marketplace/campaigns/software-procurement

• Question 1598:

  Which design principle is included in the reliability pillar of the AWS Well-Architected Framework?

  A. Automatically recover from failure.
  B. Grant everyone access to increase AWS service quotas.
  C. Stop guessing capacity.
  D. Design applications to run in a single Availability Zone.
  E. Plan to increase AWS service quotas first in a secondary AWS Region.
  A. Automatically recover from failure.

• Question 1599:

  Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?

  A. AWS VPN
  B. Amazon Connect
  C. AWS Direct Connect
  D. Internet gateway
  C. AWS Direct Connect

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/directconnect/partners/

• Question 1600:

  Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?

  A. Pay-as-you-go pricing
  B. High availability
  C. Global reach
  D. Economies of scale
  D. Economies of scale