Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1801:

  A company is planning to launch an ecommerce site in a single AWS Region to a worldwide user base.

  Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (Choose two.)

  A. Application Load Balancer

  B. AWS Global Accelerator

  C. AWS Direct Connect

  D. Amazon CloudFront

  E. AWS Lambda

  Correct Answer: BD

  Reference: https://aws.amazon.com/cloudfront/faqs/

• Question 1802:

  Which AWS service or resource is serverless?

  A. AWS Lambda

  B. Amazon EC2 instances

  C. Amazon Lightsail

  D. Amazon ElastiCache

  Correct Answer: A

  Reference: https://blogs.itemis.com/en/serverless-services-on-aws

• Question 1803:

  Which of the following are components of Amazon VPC? (Choose two.)

  A. Objects

  B. Subnets

  C. Buckets

  D. Internet gateways

  E. Access key

  Correct Answer: BD

  Reference: https://subscription.packtpub.com/book/virtualization_and_cloud/9781788293723/3/ch03lvl1sec26/vpc-components

• Question 1804:

  AWS Budgets can be used to:

  A. prevent a given user from creating a resource

  B. send an alert when the utilization of Reserved Instances drops below a certain percentage

  C. set resource limits in AWS accounts to prevent overspending

  D. split an AWS bill across multiple forms of payment

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html

• Question 1805:

  Which of the following will enhance the security of access to the AWS Management Console? (Choose two.)

  A. AWS Secrets Manager

  B. AWS Certificate Manager

  C. AWS Multi-Factor Authentication (AWS MFA)

  D. Security groups

  E. Password policies

  Correct Answer: CE

  Reference: https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using-programmatic-access/

• Question 1806:

  The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.)

  A. Information on Amazon S3 bucket permissions

  B. AWS service outages

  C. Multi-factor authentication enabled on the AWS account root user

  D. Available software patches

  E. Number of users in the account

  Correct Answer: AC

  Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/best-practice-checklist/

• Question 1807:

  Which functions can users perform using AWS KMS?

  A. Create and manage AWS access keys for the AWS account root user

  B. Create and manage AWS access keys for an AWS account IAM user

  C. Create and manage keys for encryption and decryption of data

  D. Create and manage keys for multi-factor authentication

  Correct Answer: C

  Q: What key management features are available in AWS KMS?

  A: Define which IAM users and roles can use keys to encrypt and decrypt data Reference: https://aws.amazon.com/kms/faqs/#:~:text=Q%3A%20What%20key%20management%20features,ever%20used%20within%20the%20service

• Question 1808:

  How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.)

  A. It identifies software vulnerabilities in applications running on AWS

  B. It provides a list of cost optimization recommendations based on current AWS usage

  C. It detects potential security vulnerabilities caused by permissions settings on account resources

  D. It automatically corrects potential security issues caused by permissions settings on account resources

  E. It provides proactive alerting whenever an Amazon EC2 instance has been compromised

  Correct Answer: BC

• Question 1809:

  Which of the following are advantages of the AWS Cloud? (Choose two.)

  A. AWS manages the maintenance of the cloud infrastructure

  B. AWS manages the security of applications built on AWS

  C. AWS manages capacity planning for physical servers

  D. AWS manages the development of applications on AWS

  E. AWS manages cost planning for virtual servers

  Correct Answer: AC

  Reference: https://aws.amazon.com/compliance/data-center/controls/

• Question 1810:

  Which situation should be reported to the AWS Abuse team?

  A. In Availability Zone has a service disruption

  B. An intrusion attempt is made from an AWS IP address

  C. A user has trouble accessing an Amazon S3 bucket from an AWS IP address

  D. A user needs to change payment methods due to a compromise

  Correct Answer: B

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/report-aws-abuse/