Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1761:

  Each department within a company has its own independent AWS account and its own payment method. New company leadership wants to centralize departmental governance and consolidate payments. How can this be achieved using AWS services or features?

  A. Forward monthly invoices for each account. Then create IAM roles to allow cross-account access.

  B. Create a new AWS account. Then configure AWS Organizations and invite all existing accounts to join.

  C. Configure AWS Organizations in each of the existing accounts. Then link all accounts together.

  D. Use Cost Explorer to combine costs from all accounts. Then replicate IAM policies across accounts.

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts.html

• Question 1762:

  According to the AWS Well-Architected Framework, what change management steps should be taken to achieve reliability in the AWS Cloud? (Choose two.)

  A. Use AWS Config to generate an inventory of AWS resources

  B. Use service limits to prevent users from creating or making changes to AWS resources

  C. Use AWS CloudTrail to record AWS API calls into an auditable log file

  D. Use AWS Certificate Manager to whitelist approved AWS resources and services

  E. Use Amazon GuardDuty to validate configuration changes made to AWS resources

  Correct Answer: DE

• Question 1763:

  Which service can be used to monitor and receive alerts for AWS account root user AWS Management Console sign-in events?

  A. Amazon CloudWatch

  B. AWS Config

  C. AWS Trusted Advisor

  D. AWS IAM

  Correct Answer: A

  Reference: https://aws.amazon.com/blogs/mt/monitor-and-notify-on-aws-account-root-user-activity/

• Question 1764:

  Which design principle should be considered when architecting in the AWS Cloud?

  A. Think of servers as non-disposable resources

  B. Use synchronous integration of services

  C. Design loosely coupled components

  D. Implement the least permissive rules for security groups

  Correct Answer: C

  Reference: https://www.botmetric.com/blog/aws-cloud-architecture-design-principles/

• Question 1765:

  Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.)

  A. AWS Snowball

  B. AWS Lambda

  C. AWS ElastiCache

  D. AWS Database Migration Service (AWS DMS)

  E. Amazon API Gateway

  Correct Answer: AD

  Reference: https://aws.amazon.com/snowball/

• Question 1766:

  A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional. What is the best cloud architecture to address this consistently growing demand?

  A. Run the application on a bigger EC2 instance size.

  B. Switch to an EC2 instance family that better matches batch requirements.

  C. Distribute the application across multiple EC2 instances and run the workload in parallel.

  D. Run the application on a bare metal EC2 instance.

  Correct Answer: C

• Question 1767:

  A company wants to use an AWS service to monitor the health of application endpoints, with the ability to route traffic to healthy regional endpoints to improve application availability. Which service will support these requirements?

  A. Amazon Inspector

  B. Amazon CloudWatch

  C. AWS Global Accelerator

  D. Amazon CloudFront

  Correct Answer: C

  AWS Global Accelerator uses the AWS global network to optimize the path from your users to your applications, improving the performance of your traffic by as much as 60%. AWS Global Accelerator continually monitors the health of your application endpoints and redirects traffic to healthy endpoints in less than 30 seconds.

  Reference: https://aws.amazon.com/global-accelerator/?blogs-global-accelerator.sort-by=item.additionalFields.createdDateandblogs-global-accelerator.sort-order=descandaws-global-accelerator-wn.sortby=item.additionalFields.postDateTimeandaws-global-accelerator-wn.sort-order=desc

• Question 1768:

  Which AWS service is suitable for an event-driven workload?

  A. Amazon EC2

  B. AWS Elastic Beanstalk

  C. AWS Lambda

  D. Amazon Lumberyard

  Correct Answer: C

• Question 1769:

  What is a value proposition of the AWS Cloud?

  A. AWS is responsible for security in the AWS Cloud

  B. No long-term contract is required

  C. Provision new servers in days

  D. AWS manages user applications in the AWS Cloud

  Correct Answer: B

  Reference: https://d1.awsstatic.com/whitepapers/aws-whitepaper-business-value-of-aws.pdf

• Question 1770:

  What is a characteristic of Amazon S3 cross-region replication?

  A. Both source and destination S3 buckets must have versioning disabled

  B. The source and destination S3 buckets cannot be in different AWS Regions

  C. S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts

  D. The source S3 bucket owner must have the source and destination AWS Regions disabled for their account

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/AmazonS3/latest/dev/replication.html