Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1631:

  What is an IAM best practice for AWS account root user access keys?

  A. Delete all root user access keys, if possible.
  B. Use root user credentials to access sensitive information stored on AWS.
  C. Allow the system administrator group to use the root user credentials for daily access.
  D. Use root user credentials to access production database instances.
  B. Use root user credentials to access sensitive information stored on AWS.

• Question 1632:

  A company is running a self-managed Oracle database directly on Amazon EC2 for its steady-state database. The company wants to reduce compute costs. Which option should the company use to maximize savings over a 3-year term?

  A. EC2 Dedicated Instances
  B. EC2 Spot Instances
  C. EC2 Reserved Instances
  D. EC2 On-Demand Instances
  C. EC2 Reserved Instances

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/choosing-a-cloud-platform/

• Question 1633:

  Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

  A. Amazon RDS
  B. Amazon EC2
  C. Amazon ElastiCache
  D. AWS Fargate
  B. Amazon EC2

  ---

  Explanation/Reference:

  The customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2. Reference: https://www.whizlabs.com/blog/aws-security-shared-responsibility/

• Question 1634:

  A global company has a mobile app with static data stored in an Amazon S3 bucket in the us-east-1 Region. The company serves the content through an Amazon CloudFront distribution The company is launching the mobile app In South Africa The data must reside in the af south 1 Region The company does not want to deploy a specific, mobile client for South Africa.

  What should the company do to meet these requirements?

  A. Use the CloudFront geographic restriction feature to block access to users in South Africa
  B. Create a Lambda@Edge function Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region
  C. Create a Lambda@Edge function. Associate the Lambda@Edge function as a viewer response trigger with the CloudFront distribution to change the S3 origin Region
  D. Include af-south-1 in the alternate domain name (CNAME) of the CloudFront distribution
  B. Create a Lambda@Edge function Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region

• Question 1635:

  A company needs a solution that can provide automated notifications and perform automated actions if the company's monthly AWS costs exceed a specific threshold. Which AWS service or tool provides this functionality?

  A. AWS Budgets
  B. AWS Cost Explorer
  C. AWS Trusted Advisor
  D. Amazon Inspector
  A. AWS Budgets

  ---

  Explanation/Reference:

  AWS Budgets is a free service that allows you to set custom cost and usage budgets that alert you when you exceed (or are forecasted to exceed) your budgeted amount. You can also set up to 10 email or SMS notifications for each budget and you can use AWS Lambda to automate actions, such as stopping an Amazon EC2 instance, when a budget threshold is exceeded. AWS Cost Explorer provides cost and usage data, but it doesn't provide automated notifications or actions. AWS Trusted Advisor provides cost optimization recommendations, but it doesn't provide cost monitoring or automated actions. Amazon Inspector is a security assessment service and not related to cost management

• Question 1636:

  Which of the following is an AWS database service?

  A. Amazon Redshift
  B. Amazon Elastic Block Store (Amazon EBS)
  C. Amazon S3 Glacier
  D. AWS Snowball
  A. Amazon Redshift

  ---

  Explanation/Reference:

  Reference: https://www.sisense.com/glossary/redshift-database/

• Question 1637:

  Which benefit is included with an AWS Enterprise Support plan?

  A. AWS Partner Network (APN) support at no cost.
  B. Designated support from an AWS technical account manager (TAM)
  C. On-site support from AWS engineers
  D. AWS managed compliance as code with AWS config
  B. Designated support from an AWS technical account manager (TAM)

  ---

  Explanation/Reference:

  B. Patch Amazon EC2 instances.

  AWS performs automatic patching of Amazon EC2 instances as part of its shared responsibility model for managing security in the cloud. AWS manages the underlying infrastructure and provides patches and updates for the infrastructure components, including the hypervisor, network, and storage layers. However, customers are responsible for patching the operating system, applications, and software that they install on their EC2 instances.

• Question 1638:

  The AWS 1AM best practice for granting least privilege is to.

  A. apply an 1AM policy to an IAN1 group and limit the size of the group.
  B. require multi-factor authentication (MFA) for all 1AM users
  C. require each 1AM user who has different permissions to have multiple passwords.
  D. apply an 1AM policy only to IAM users who require it
  A. apply an 1AM policy to an IAN1 group and limit the size of the group.

• Question 1639:

  A company believes an unauthorized user copied data from an Amazon S3 bucket to their own account.

  Which AWS service will record the actions taken by the user?

  A. Amazon CloudWatch
  B. AWS CloudTrail
  C. AWS Infrastructure Event Management
  D. AWS Systems Manager
  B. AWS CloudTrail

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html

• Question 1640:

  A company stores several terabytes of data in an Amazon S3 bucket. The company needs to query the data by using standard SQL and does not want to set up infrastructure. Which AWS service should the company use to meet these. requirements?

  A. Amazon RDS
  B. Amazon Redshift
  C. Amazon Athena
  D. Amazon EC2
  C. Amazon Athena