Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1641:

  A company wants to push VPC Flow Logs to an Amazon S3 bucket.

  Which action is the company's responsibility?

  A. Managing the infrastructure that runs the S3 bucket.
  B. Managing the data in transit.
  C. Managing the encryption options on the S3 bucket
  D. Managing the operating system updates on the S3 bucket
  C. Managing the encryption options on the S3 bucket

• Question 1642:

  A company has an application that stores a high volume of unstructured data and session history. The company needs to scale the application reliably to millions of concurrent users while ensuring consistent low latency. Which AWS service meets these requirements?

  A. Amazon RDS for MariaDB
  B. Amazon DynamoDB
  C. Amazon RDS for SQL Server
  D. Amazon Redshift
  B. Amazon DynamoDB

  ---

  Explanation/Reference:

  Answer B: Amazon DynamoDB.

  Option C, Amazon RDS for SQL Server, is a relational database service that may not be the most suitable option for storing unstructured data and session history that require consistent low latency and can scale to millions of concurrent users. Therefore, option B, Amazon DynamoDB, which is a fully managed NoSQL database service that can handle high volumes of unstructured data with low latency and can scale horizontally to meet the demands of millions of concurrent users, is a better option to meet the requirements mentioned in the question

• Question 1643:

  Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)

  A. Patch AWS network devices.
  B. Set user password rules.
  C. Provide physical security for compute resources.
  D. configure security groups.
  E. Patch the operating system of an Amazon EC2 instance.
  A. Patch AWS network devices.
  C. Provide physical security for compute resources.

• Question 1644:

  Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?

  A. AWS Trusted Advisor
  B. AWS CloudWatch
  C. Cost Explorer
  D. AWS Budgets
  C. Cost Explorer

• Question 1645:

  Which of the following can be used to identify a specific user who stopped an amazon EC2 instance?

  A. AWS CloudTrail
  B. Amazon Inspector
  C. Amazon CloudWatch
  D. VPC Flow Logs
  A. AWS CloudTrail

  ---

  Explanation/Reference:

  With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-system-instance-status-check.html

• Question 1646:

  The continual reduction of AWS Cloud pricing is due to:

  A. pay-as-you go pricing
  B. the AWS global infrastructure
  C. economies of scale
  D. reserved storage pricing
  C. economies of scale

  ---

  Explanation/Reference:

  Reference: https://read.acloud.guru/there-are-four-reasons-to-explain-how-using-aws-can-change-the-economic-model-of-the-it-services-850dcc8ea1aa?gi=3bcf6cd0e1e2

• Question 1647:

  A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?

  A. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0.
  B. Run AWS Trusted Advisor and review the findings.
  C. Open the AWS IAM console and check the inbound rule filters for open access.
  D. In AWS Config, create a custom rule that invokes an AWS Lambda function to review rules for inbound access.
  A. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0.

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ec2-security-groups.html

• Question 1648:

  A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload to AWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency. Which AWS service or feature should the company use to meet these requirements?

  A. Availability Zones
  B. AWS Local Zones
  C. AWS Wavelength
  D. AWS Outposts
  D. AWS Outposts

  ---

  Explanation/Reference:

  AWS Outposts is designed for workloads that need to remain on-premises due to latency requirements, where customers want that workload to run seamlessly with the rest of their other workloads in AWS.

  AWS Local Zones are a new type of AWS infrastructure designed to run workloads that require single-digit millisecond latency, like video rendering and graphics intensive, virtual desktop applications. Not every customer wants to operate their own on-premises data center, while others may be interested in getting rid of their local data center entirely. Local Zones allow customers to gain all the benefits of having compute and storage resources closer to end-users, without the need to own and operate their own data center infrastructure.

  (D) AWS Outposts would be the best fit here. Since the client is migrating only the workloads on AWS while (B) AWS Local Zone wants to get rid of hosting its on-prem data center.

• Question 1649:

  A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements?

  A. AWS Lambda
  B. Amazon RDS
  C. AWS Fargate
  D. Amazon Athena
  C. AWS Fargate

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/ecs/?whats-new-cards.sort-by=item.additionalFields.postDateTimeandwhats-new-cards.sort-order=descandecs-blogs.sort-by=item.additionalFields.createdDateandecs-blogs.sort-order=desc

• Question 1650:

  Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

  A. Route table
  B. AWS Transit Gateway
  C. AWS Global Accelerator
  D. Amazon VPC
  C. AWS Global Accelerator