Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1831:

  What is the MOST secure way to store passwords on AWS?

  A. Store passwords in an Amazon S3 bucket.
  B. Store passwords as AWS CloudFormation parameters.
  C. Store passwords in AWS Storage Gateway.
  D. Store passwords in AWS Secrets Manager.
  D. Store passwords in AWS Secrets Manager.

• Question 1832:

  Which of the following will help a user determine if they need to request a VPC service limit increase?

  A. AWS Personal Health Dashboard
  B. AWS Trusted Advisor
  C. AWS Cost and Usage Report
  D. AWS Service Catalog
  B. AWS Trusted Advisor

  ---

  Explanation/Reference:

  B. AWS Trusted Advisor

  AWS Trusted Advisor is a service that provides best practice recommendations across multiple areas, including performance, security, and cost optimization. It will check the VPC service limits and will notify the user if the current usage is approaching the service limit. This will help the user to determine if they need to request a service limit increase.

  AWS Personal Health Dashboard provides personalized information about the performance and availability of the AWS services that you use.

  AWS Cost and Usage Report provides detailed information about your costs and usage.

  AWS Service Catalog enables organizations to create and manage catalogs of IT services that are approved for use on AWS.

• Question 1833:

  A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources. Which AWS service should the company use?

  A. AWS Config
  B. AWS Secrets Manager
  C. AWS CloudTrail
  D. AWS Trusted Advisor
  A. AWS Config

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/config/

• Question 1834:

  Which AWS service or feature gives end users the ability to access AWS resources from any location by using an encrypted connection?

  A. Amazon CloudFront
  B. AWS Client VPN
  C. AWS Direct Connect
  D. AWS PrivateLink
  A. Amazon CloudFront

• Question 1835:

  Which AWS service allows users to identify the changes made to a resource over time?

  A. Amazon Inspector
  B. AWS Config
  C. AWS Service Catalog
  D. AWS IAM
  B. AWS Config

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/config/latest/developerguide/view-manage-resource.html

• Question 1836:

  Which of the following are characteristics of AWS WAF? (Select TWO.)

  A. Acts as a firewall that controls inbound and outbound traffic between Amazon EC2 instances
  B. Acts as a firewall that controls inbound and outbound traffic between subnets
  C. Gives users the ability to block traffic that has specific HTTP headers
  D. Protects websites that are not hosted on AWS
  E. Scans Amazon EC2 instances for common vulnerabilities
  B. Acts as a firewall that controls inbound and outbound traffic between subnets
  C. Gives users the ability to block traffic that has specific HTTP headers

  ---

  Explanation/Reference:

  AWS WAF lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers and body, or custom URIs. This gives you an additional layer of protection from web attacks that attempt to exploit vulnerabilities in custom or third party web applications. In addition, AWS WAF makes it easy to create rules that block common web exploits like SQL injection and cross site scripting. AWS WAF allows you to create a centralized set of rules that you can deploy across multiple websites. This means that in an environment with many websites and web applications you can create a single set of rules that you can reuse across applications rather than recreating that rule on every application you want to protect.

• Question 1837:

  A company needs the historical cost and service usage details of its Amazon EC2 instances. Which AWS service or tool will provide this information?

  A. AWS Budgets
  B. Amazon Forecast
  C. AWS Cost Explorer
  D. AWS Pricing Calculator
  C. AWS Cost Explorer

  ---

  Explanation/Reference:

  AWS Cost Explorer helps you visualize, understand, and manage your AWS costs and usage over a daily or monthly granularity. You can also access your data with further granularity by enabling hourly and resource level granularity.

• Question 1838:

  Which action will help increase security in the AWS Cloud?

  A. Enable programmatic access for all IAM users.
  B. Use IAM users instead of IAM roles to delegate permissions.
  C. Rotate access keys on a reoccurring basis.
  D. Use inline policies instead of customer managed policies.
  C. Rotate access keys on a reoccurring basis.

  ---

  Explanation/Reference:

  https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html Where possible, we recommend relying on temporary credentials instead of creating long- term credentials such as access keys. However, for scenarios in which you need IAM users with programmatic access and long-term credentials, we recommend that you rotate access keys. Regularly rotating long-term credentials helps you familiarize yourself with the process. This is useful in case you are ever in a situation where you must rotate credentials, such as when an employee leaves your company. We recommend that you use IAM access last used information to rotate and remove access keys safely.

• Question 1839:

  A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases. Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

  A. Elastic Load Balancing
  B. Amazon EC2 Auto Scaling
  C. AWS App2Container (A2C)
  D. AWS Systems Manager
  B. Amazon EC2 Auto Scaling

• Question 1840:

  Which AWS service or feature can be used to control inbound and outbound traffic on an Amazon EC2 instance?

  A. Internet gateways
  B. AWS Identity and Access Management (IAM)
  C. Network ACLs
  D. Security groups
  D. Security groups

  ---

  Explanation/Reference:

  D. Security groups can be used to control inbound and outbound traffic on an Amazon EC2 instance.

  Security groups act as a virtual firewall for your EC2 instances, allowing you to control inbound and outbound traffic at the instance level. You can specify the inbound and outbound traffic rules by defining security group rules, which act as virtual firewall rules that filter traffic based on protocols, ports, and source/destination IP addresses.

  Internet Gateways are used to enable communication between instances in your VPC and the internet. AWS Identity and Access Management (IAM) is used for managing user access and permissions to AWS resources. Network ACLs can be used to control traffic at the subnet level in your VPC.