Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1791:

  A user wants guidance on possible savings when migrating from on-premises to AWS Which tool is suitable for this scenario?

  A. AWS Budgets
  B. Cost Explorer
  C. AWS Total Cost of Ownership (TCO) Calculator
  D. AWS Well-Architected Tool
  C. AWS Total Cost of Ownership (TCO) Calculator

• Question 1792:

  Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

  A. Amazon FSx for Windows File Server
  B. Amazon Workspaces virtual Windows desktop
  C. AWS Directory Service for Microsoft Active Directory
  D. Amazon RDS for Microsoft SQL Server
  B. Amazon Workspaces virtual Windows desktop

• Question 1793:

  A system administrator notices that several Amazon EC2 instances nave been terminated. The system administrator needs to identity the user or AWS API call that terminated these instances. Which AWS service should the system administrator use to meet this requirement?

  A. AWS Trusted Advisor
  B. AWS CloudTrail
  C. Amazon Inspector
  D. Amazon Detective
  B. AWS CloudTrail

• Question 1794:

  Which services can be used to deploy applications on AWS? (Choose two.)

  A. AWS Elastic Beanstalk
  B. AWS Config
  C. AWS OpsWorks
  D. AWS Application Discovery Service
  E. Amazon Kinesis
  A. AWS Elastic Beanstalk
  C. AWS OpsWorks

  ---

  Explanation/Reference:

  A. AWS Elastic Beanstalk- It is an easy-to-use service for deploying, scaling, and managing applications in the AWS Cloud. Developers can simply upload their code and Elastic Beanstalk will automatically handle the deployment details.

  C. AWS OpsWorks- It is a configuration management service that provides managed instances of Chef and Puppet. It allows developers to automate the configuration of their applications and infrastructure. Therefore, the correct answer is A and C

• Question 1795:

  A company needs to configure rules to identify threats and protect applications from malicious network access. Which AWS service should the company use to meet these requirements?

  A. AWS Identity and Access Management (IAM)
  B. Amazon QuickSight
  C. AWS WAF
  D. Amazon Detective
  C. AWS WAF

  ---

  Explanation/Reference:

  To configure rules to identify threats and protect applications from malicious network access, the company should use AWS WAF (Web Application Firewall). AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF enables the company to create custom rules that block common attack patterns, such as SQL injection or cross-site scripting (XSS), and monitor HTTP traffic for any suspicious behavior. AWS WAF can be integrated with other AWS services, such as Amazon CloudFront or Application Load Balancer, to provide a scalable and flexible solution for

  web application security.

• Question 1796:

  Which options are perspectives that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

  A. Sustainability
  B. Security
  C. Performance efficiency
  D. Reliability
  E. Operations
  B. Security
  E. Operations

• Question 1797:

  An application is receiving SQL injection attacks from multiple external resources. Which AWS service or feature can help automate mitigation against these attacks?

  A. AWS WAF
  B. Security groups
  C. Elastic Load Balancer
  D. Network ACL
  A. AWS WAF

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-sqli-match.html

• Question 1798:

  A database administrator is trying to determine who deleted a critical Amazon Redshift cluster. Which AWS service helps with monitoring and retaining this type of account activity?

  A. AWS CloudTrail
  B. AWS Organizations
  C. AWS Identity and Access Management (IAM)
  D. AWS Trusted Advisor
  A. AWS CloudTrail

• Question 1799:

  Which actions support the reliability pillar of the AWS Architected Framework? (Select TWO.)

  A. Enforce higher security specifically in regard to designed for failure.
  B. Ensure that backend components include multiple Availability Zone deployments.
  C. Avoid the use of automatic scaling to simplify the cloud architecture.
  D. Enable object versioning within Amazon S3 and replicating data to another AWS Region.
  E. Include an Application Load Balancer to distribute traffic to multiple Amazon EC2 instance in separate Availability Zones
  B. Ensure that backend components include multiple Availability Zone deployments.
  D. Enable object versioning within Amazon S3 and replicating data to another AWS Region.

• Question 1800:

  Which AWS service can serve a static website?

  A. Amazon S3
  B. Amazon Route 53
  C. Amazon QuickSight
  D. AWS X-Ray
  A. Amazon S3

  ---

  Explanation/Reference:

  You can host a static website on Amazon Simple Storage Service (Amazon S3). On a static website, individual webpages include static content. They might also contain client-side scripts. By contrast, a dynamic website relies on server-side processing, including server-side scripts such as PHP, JSP, or ASP.NET. Amazon S3 does not support server-side scripting.

  Reference: https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html