Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1691:

  Which actions is the responsibility of AWS under the AWS shared responsibility model (Select TWO.)

  A. Scanning AWS service endpoints for vulnerabilities
  B. Enabling encryption on an Amazon S3 bucket
  C. Configuring security group rules
  D. Enforcing application access restrictions
  E. Encrypting traffic on the AWS backbone between global and regional AWS facilities
  A. Scanning AWS service endpoints for vulnerabilities
  E. Encrypting traffic on the AWS backbone between global and regional AWS facilities

• Question 1692:

  Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate?

  A. Reserved Instances
  B. On-Demand Instances
  C. Dedicated Instances
  D. Spot Instances
  D. Spot Instances

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/ec2/spot/

• Question 1693:

  Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links?

  A. Availability Zone
  B. Edge location
  C. Region
  D. Private networking
  A. Availability Zone

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html

• Question 1694:

  Which of the following are benefits of VPC endpoints? (Choose two.)

  A. A VPC endpoint makes private connections possible between an on-premises environment and supported AWS services.
  B. A VPC endpoint applies encryption to a connection that would be unencrypted otherwise.
  C. A VPC endpoint makes private connections possible between a VPC and supported AWS services.
  D. A VPC endpoint does not require an internet gateway, virtual private gateway, NAT device, VPN connection, or AWS Direct Connect connection.
  E. A VPC endpoint makes public connections possible for applications. Instances in the VPC do not require public IP addresses to communicate with the internet.
  A. A VPC endpoint makes private connections possible between an on-premises environment and supported AWS services.
  C. A VPC endpoint makes private connections possible between a VPC and supported AWS services.

• Question 1695:

  A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports.

  Which AWS service or group can provide these documents?

  A. AWS Abuse team
  B. AWS Artifact
  C. AWS Support
  D. AWS Config
  B. AWS Artifact

  ---

  Explanation/Reference:

  Portal that provides customers with on-demand access to AWS compliance documentation and AWS agreements Artifact Reports- Allows you to download AWS security and compliance documents from third-party auditors, like AWS ISO certifications, Payment Card Industry (PCI), and System and Organization Control (SOC) reports Artifact Agreements-Allows you to review, accept, and track the status of AWS agreements such as the Business Associate Addendum (BAA) or the Health Insurance Portability and Accountability Act (HIPAA) for an individual account or in your organization Can be used to support internal audit or compliance

  Reference: https://aws.amazon.com/artifact/faq/

• Question 1696:

  A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing. Which AWS service or feature will help the company with its migration?

  A. AWS Trusted Advisor
  B. AWS Consulting Partners
  C. AWS Artifacts
  D. AWS Managed Services
  B. AWS Consulting Partners

  ---

  Explanation/Reference:

  AWS Partner Network (APN) Consulting Partners help customers design, architect, build, migrate, and manage workloads and applications on Amazon Web Services. https://d1.awsstatic.com/partner-network/APN_Consulting-Benefits_Brochure-Digital.pdf

• Question 1697:

  A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices. Which best practice of the AWS Well-Architected Framework is the company following with this plan?

  A. Integrate functional testing as part of AWS deployment.
  B. Use automation to deploy changes.
  C. Deploy the application to multiple locations.
  D. Implement loosely coupled dependencies.
  D. Implement loosely coupled dependencies.

  ---

  Explanation/Reference:

  Loose coupling is an approach to interconnecting the components in a system or network so that those components, also called elements, depend on each other to the least extent practicable. Coupling refers to the degree of direct knowledge that one element has of another.

• Question 1698:

  Which AWS feature allows a company to take advantage of usage tiers for services across multiple member accounts?

  A. Service control policies (SCPs)
  B. Consolidated billing
  C. All Upfront Reserved Instances
  D. AWS Cost Explorer
  B. Consolidated billing

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/tco-calculator/

• Question 1699:

  Which AWS services should a company use to read and write data that changes frequently? (Choose two.)

  A. Amazon S3 Glacier
  B. Amazon RDS
  C. AWS Snowball
  D. Amazon Redshift
  E. Amazon Elastic File System (Amazon EFS)
  B. Amazon RDS
  E. Amazon Elastic File System (Amazon EFS)

  ---

  Explanation/Reference:

  The two AWS services that a company should use to read and write data that changes frequently are:

  B. Amazon RDS: Amazon RDS is a managed relational database service that provides a scalable and highly available database platform for applications. It supports various popular database engines such as MySQL, PostgreSQL, Oracle, and SQL Server, and allows users to easily create, operate, and scale a relational database in the cloud. Amazon RDS is well-suited for applications that require frequent read and write operations to the database.

  E. Amazon Elastic File System (Amazon EFS): Amazon EFS is a fully managed, scalable, and highly available file storage service for use with Amazon EC2 instances. It provides a simple, scalable, and reliable way to share data across multiple EC2 instances, and supports multiple file systems, file locking, and file permissions. Amazon EFS is well-suited for applications that require shared access to frequently changing data, such as content management systems, web serving, and Big Data applications.

• Question 1700:

  How can a customer increase security to AWS account logons? (Choose two.)

  A. Configure AWS Certificate Manager
  B. Enable Multi-Factor Authentication (MFA)
  C. Use Amazon Cognito to manage access
  D. Configure a strong password policy
  E. Enable AWS Organizations
  B. Enable Multi-Factor Authentication (MFA)
  C. Use Amazon Cognito to manage access

  ---

  Explanation/Reference:

  Your root account should always be protected by Multi-Factor Authentication (MFA). This additional layer of security helps protect against unauthorized logins to your account by requiring two factors: something you know (a password) and

  something you have (for example, an MFA device). AWS supports virtual and hardware MFA devices and U2F security keys.

  Cognito can be used as an Identity Provider (IdP), where it stores and maintains users and credentials securely for your applications, or it can be integrated with OpenID Connect, SAML, and other popular web identity providers like

  Amazon.com.

  Using Amazon Cognito, you can generate temporary access credentials for your clients to access AWS services, eliminating the need to store long-term credentials in client applications. Reference: https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using-programmatic-access/