Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1771:

  A company distributes traffic evenly among a fleet of Amazon EC2 instances. The EC2 instances must accommodate unpredictable increases in traffic. Which benefit does the AWS Cloud provide to meet this requirement?

  A. Scalability
  B. Resilience
  C. Security
  D. Agility
  A. Scalability

• Question 1772:

  A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed. Which AWS services can provide this information? (Select TWO.)

  A. AWS Artifact
  B. AWS Trusted Advisor
  C. AWS Config
  D. AWS Cloud Trail
  E. AWS Identity and Access Management (IAM)
  C. AWS Config
  D. AWS Cloud Trail

  ---

  Explanation/Reference:

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks. These checks identify ways to optimize your AWS infrastructure, improve security and performance, reduce costs, and monitor service quotas. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and remediation actions. AWS Identity and Access Management (IAM) provides fine-grained access control across all of AWS. With IAM, you can specify who can access which services and resources, and under which conditions. With IAM policies, you manage permissions to your workforce and systems to ensure least-privilege permissions.

• Question 1773:

  A company wants to centrally manage security policies and billing services within a multi-account AWS environment.

  Which AWS service should the company use to meet these requirements?

  A. AWS Identity and Access Management (IAM)
  B. AWS Organizations
  C. AWS Resource Access Manager (AWS RAM)
  D. AWS Config
  B. AWS Organizations

• Question 1774:

  An ecommerce application is running behind an Application Load Balancer. A developer observes some unexpected load on the application during non-peak hours. The developer wants to analyze patterns for the client IP addresses that use the application.

  Which HTTP header should the developer use for this analysis?

  A. The X-Forwarded-Proto header
  B. The X-Forwarded-Host header
  C. The X Forwarded For header
  D. The X-Forwarded-Port header
  C. The X Forwarded For header

• Question 1775:

  Which AWS IAM feature is used to associate a set of permissions with multiple users?

  A. Multi-factor authentication
  B. Groups
  C. Password policies
  D. Access keys
  B. Groups

  ---

  Explanation/Reference:

  An IAM group is a collection of IAM users. You can use groups to specify permissions for a collection of users, which can make those permissions easier to manage for those users. For example, you could have a group called Admins and give that group the types of permissions that administrators typically need. Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html

• Question 1776:

  Which actions are within the scope of AWS Support? (Select TWO.)

  A. Debugging custom software
  B. Troubleshooting operational problems with AWS resources
  C. Performing system administration tasks
  D. Investigating issues detected by health checks
  E. Developing application code
  B. Troubleshooting operational problems with AWS resources
  C. Performing system administration tasks

  ---

  Explanation/Reference:

  AWS manages the infrastructure and foundation services, operating system, and application platform. You are responsible for customer data, encrypting that data, and protecting it through network firewalls and backups.

• Question 1777:

  A company needs to apply security rules to specific Amazon EC2 instances. Which AWS service or feature provides this functionality?

  A. AWS Shield
  B. Network ACLs
  C. Security groups
  D. AWS Firewall Manager
  C. Security groups

• Question 1778:

  Which AWS service can a company use to analyze and debug performance issues of an AWS Lambda function?

  A. Amazon Inspector
  B. Amazon Detective
  C. AWS CodeStar
  D. AWS X-Ray
  D. AWS X-Ray

  ---

  Explanation/Reference:

  https://docs.aws.amazon.com/lambda/latest/operatorguide/general-approach.html

• Question 1779:

  A large organization has a single AWS account.

  What are the advantages of reconfiguring the single account into multiple AWS accounts? (Select TWO.)

  A. It allows for administrative isolation between different workloads.
  B. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.
  C. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.
  D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.
  E. Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.
  A. It allows for administrative isolation between different workloads.
  D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.

• Question 1780:

  A company wants to integrate its online shopping website with social media login credentials Which AWS service can the company use to make this integration?

  A. AWS Directory Service
  B. AWS Identity and Access Management (IAM)
  C. Amazon Cognito
  D. AWS Single Sign-On
  C. Amazon Cognito