Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1731:

  A company wants to rightsize its infrastructure to control costs.

  At which points should the company rightsize? (Choose two.)

  A. Rightsize before a migration occurs to the cloud.
  B. Rightsize continuously after the cloud onboarding process.
  C. Rightsize when AWS Support calls and explains that rightsizing is needed.
  D. Rightsize when seasonal workloads are at their peak.
  E. Rightsize after purchasing all Reserved Instances.
  A. Rightsize before a migration occurs to the cloud.
  B. Rightsize continuously after the cloud onboarding process.

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/whitepapers/latest/cost-optimization-right-sizing/tips-for-right-sizing-your-workloads.html

• Question 1732:

  Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.)

  A. AWS Storage Gateway
  B. Virtual private gateway
  C. NAT gateway
  D. Customer gateway
  E. Internet gateway
  B. Virtual private gateway
  D. Customer gateway

  ---

  Explanation/Reference:

  The VPC has an attached virtual private gateway, and your on-premises (remote) network includes a customer gateway device, which you must configure to enable the Site-to-Site VPN connection. You set up the routing so that any traffic from the VPC bound for your network is routed to the virtual private gateway.

• Question 1733:

  Which network security features are supported by Amazon VPC? (Select TWO.)

  A. Network ACLs
  B. Internet gateways
  C. VPC peering
  D. Security groups
  E. Firewall rules
  A. Network ACLs
  D. Security groups

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Security.html

• Question 1734:

  A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.

  Which of the following is an AWS best practice for using the AWS account root user credentials?

  A. Allow only the manager to use the account root user credentials for normal activities
  B. Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier
  C. Use the account root user credentials only when they alone must be used to perform a required function
  D. Use the account root user credentials only for the creation of private VPC subnets
  C. Use the account root user credentials only when they alone must be used to perform a required function

• Question 1735:

  A company has developed a distributed application that recovers gracefully from Interruptions. The application periodically processes large volumes of data by using multiple Amazon EC2 Instances. The application is sometimes idle for months.

  Which EC2 instance purchasing option is MOST cost-effective for this use case?

  A. Reserved Instances
  B. Spot Instances
  C. Dedicated Instances
  D. On-Demand Instances
  B. Spot Instances

  ---

  Explanation/Reference:

  B. Spot instances.

  Since the application is sometimes idle for months, spot instances are the most cost-effective option for this use case. Spot instances allow users to bid on unused EC2 capacity, and the price is determined by supply and demand. When

  demand for EC2 capacity increases, the spot instance price goes up, and when demand decreases, the spot instance price goes down. This makes spot instances ideal for workloads that are flexible and can be interrupted, such as batch

  processing jobs, data analysis, and testing environments. Since the application can recover gracefully from interruptions, spot instances are a cost- effective option that can save the company money when the instances are available.

• Question 1736:

  What tool enables customers without an AWS account to estimate costs for almost all AWS services?

  A. Cost Explorer
  B. TCO Calculator
  C. AWS Budgets
  D. Simple Monthly Calculator
  A. Cost Explorer

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/aws-cost-management/aws-cost-explorer/

• Question 1737:

  Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)

  A. Physical and environmental controls
  B. Patch management
  C. Cloud awareness and training
  D. Zone security
  E. Application data encryption
  B. Patch management
  C. Cloud awareness and training

  ---

  Explanation/Reference:

  B and C according to aws:

  Shared Controls ?Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must

  provide their own control implementation within their use of AWS services. Examples include:

  Patch Management ?AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management ?AWS maintains the configuration of its

  infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness and Training- AWS trains AWS employees, but a customer must train their own employees.

• Question 1738:

  A company wants to rotate, manage, and retrieve credentials that are used to access databases in the company's AWS account. Which AWS service can the company use to meet these requirements?

  A. AWS Secrets Manager
  B. AWS Security Hub
  C. AWS Shield
  D. AWS WAF
  A. AWS Secrets Manager

  ---

  Explanation/Reference:

  A. AWS Secrets Manager

  AWS Secrets Manager is a service that enables customers to easily rotate, manage, and retrieve database credentials, API keys, and other sensitive data. Secrets Manager allows customers to store and manage sensitive information, such as database credentials, in a secure and centralized location. It also provides the ability to automatically rotate credentials on a schedule, ensuring that the credentials are always up-to- date and secure. Additionally, Secrets Manager integrates with AWS services such as Amazon RDS, and Amazon DocumentDB, allowing customers to automatically rotate credentials used to access these services. This helps to reduce the risk of credentials being compromised.

• Question 1739:

  A company wants to transfer petabytes of data as quickly as possible from on-premises locations to the AWS Cloud. Which AWS service should the company use?

  A. AWS Snowball
  B. AWS Global Accelerator
  C. Amazon S3 Transfer Acceleration
  D. Amazon Connect
  A. AWS Snowball

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/getting-started/projects/migrate-petabyte-scale-data/

• Question 1740:

  What is the MINIMUM AWS Support plan level that will provide users with access to the AWS Support API?

  A. Developer
  B. Enterprise
  C. Business
  D. Basic
  C. Business

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/plans/