Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1691:

  What can be used to automate and manage secure, well-architected, multi-account AWS environments?

  A. AWS shared responsibility model

  B. AWS Control Tower

  C. AWS Security Hub

  D. AWS Well-Architected Tool

  Correct Answer: B

  Control Tower automates the process of setting up a new baseline multi-account AWS environment that is secure, well-architected, and ready to use. Control Tower incorporates the knowledge that AWS Professional Service has gained over

  the course of thousands of successful customer engagements.

  Reference: https://aws.amazon.com/blogs/aws/aws-control-tower-set-up-govern-a-multi-account-aws-environment/

• Question 1692:

  What is a benefit of consolidated billing for AWS accounts?

  A. Access to AWS Personal Health Dashboard

  B. Combined usage volume discounts

  C. Improved account security

  D. Centralized AWS IAM

  Correct Answer: B

  Reference: https://jayendrapatil.com/aws-consolidated-billing/

• Question 1693:

  Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?

  A. AWS Organizations

  B. AWS Budgets

  C. Cost Explorer

  D. AWS Trusted Advisor

  Correct Answer: B

  Reference: https://aws.amazon.com/getting-started/hands-on/control-your-costs-free-tier-budgets/

• Question 1694:

  Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?

  A. Amazon GuardDuty

  B. Amazon Inspector

  C. Amazon Macie

  D. AWS Shield

  Correct Answer: C

  Reference: https://aws.amazon.com/macie/

• Question 1695:

  Which tool can be used to monitor AWS service limits?

  A. AWS Total Cost of Ownership (TCO) Calculator

  B. AWS Trusted Advisor

  C. AWS Personal Health Dashboard

  D. AWS Cost and Usage report

  Correct Answer: B

  Reference: https://aws.amazon.com/blogs/mt/monitoring-service-limits-with-trusted-advisor-and-amazon-cloudwatch/

• Question 1696:

  A company has distributed its workload on both the AWS Cloud and some on-premises servers. What type of architecture is this?

  A. Virtual private network

  B. Virtual private cloud

  C. Hybrid cloud

  D. Private cloud

  Correct Answer: C

  Reference: https://aws.amazon.com/hybrid/

• Question 1697:

  Which of the following describes a security best practice that can be implemented using AWS IAM?

  A. Disable AWS Management Console access for all users

  B. Generate secret keys for every IAM user

  C. Grant permissions to users who are required to perform a given task only

  D. Store AWS credentials within Amazon EC2 instances

  Correct Answer: C

  Reference: https://cloudcheckr.com/cloud-security/top-5-iam-best-practices/

• Question 1698:

  How can a company separate costs for network traffic, Amazon EC2, Amazon S3, and other AWS services by department?

  A. Add department-specific tags to each resource

  B. Create a separate VPC for each department

  C. Create a separate AWS account for each department

  D. Use AWS Organizations

  Correct Answer: A

  Reference: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/custom-tags.html#allocation-how

• Question 1699:

  A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability?

  A. AWS Secrets Manager

  B. AWS Systems Manager

  C. AWS Key Management Service (AWS KMS)

  D. AWS Certificate Manager

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/data-protection.html

• Question 1700:

  Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage?

  A. Easy and fast deployment of applications in multiple Regions around the world

  B. Security of the AWS Cloud

  C. Elasticity of the AWS Cloud

  D. Lower variable costs due to massive economies of scale

  Correct Answer: C