Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1881:

  Which AWS service is a content delivery network that securely delivers data, video, and applications to users globally with low latency and high speeds?

  A. AWS CloudFormation

  B. AWS Direct Connect

  C. Amazon CloudFront

  D. Amazon Pinpoint

  Correct Answer: C

  Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment. CloudFront is integrated with AWS ?both physical locations that are directly connected to the AWS global infrastructure, as well as other AWS services.

  Reference: https://aws.amazon.com/cloudfront/

• Question 1882:

  Which service enables customers to audit and monitor changes in AWS resources?

  A. AWS Trusted Advisor

  B. Amazon GuardDuty

  C. Amazon Inspector

  D. AWS Config

  Correct Answer: D

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting.

  Reference: https://aws.amazon.com/config/

• Question 1883:

  Which AWS service identifies security groups that allow unrestricted access to a user's AWS resources?

  A. AWS CloudTrail

  B. AWS Trusted Advisor

  C. Amazon CloudWatch

  D. Amazon Inspector

  Correct Answer: B

• Question 1884:

  According to the AWS shared responsibility model, who is responsible for configuration management?

  A. It is solely the responsibility of the customer.

  B. It is solely the responsibility of AWS.

  C. It is shared between AWS and the customer.

  D. It is not part of the AWS shared responsibility model.

  Correct Answer: C

  AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 1885:

  Which of the following is a cloud architectural design principle?

  A. Scale up, not out.

  B. Loosely couple components.

  C. Build monolithic systems.

  D. Use commercial database software.

  Correct Answer: B

  Loosely coupled architectures reduce interdependencies, so that a change or failure in a component does not cascade to other components. Reference: https://aws-certified-cloud-practitioner.fandom.com/wiki/1.3_List_the_different_cloud_architecture_design_principles

• Question 1886:

  Under the shared responsibility model; which of the following areas are the customer's responsibility? (Choose two.)

  A. Firmware upgrades of network infrastructure

  B. Patching of operating systems

  C. Patching of the underlying hypervisor

  D. Physical security of data centers

  E. Configuration of the security group

  Correct Answer: BE

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 1887:

  Which tool can be used to compare the costs of running a web application in a traditional hosting environment to running it on AWS?

  A. AWS Cost Explorer

  B. AWS Budgets

  C. AWS Cost and Usage report

  D. AWS Total Cost of Ownership (TCO) Calculator

  Correct Answer: D

  Reference: https://aws.amazon.com/tco-calculator/

• Question 1888:

  Which services use AWS edge locations? (Choose two.)

  A. Amazon CloudFront

  B. AWS Shield

  C. Amazon EC2

  D. Amazon RDS

  E. Amazon ElastiCache

  Correct Answer: AC

  Reference: https://www.edureka.co/community/600/what-is-an-edge-location-in-aws

• Question 1889:

  What is the value of using third-party software from AWS Marketplace instead of installing third-party software on Amazon EC2? (Choose two.)

  A. Users pay for software by the hour or month depending on licensing.

  B. AWS Marketplace enables the user to launch applications with 1-Click.

  C. AWS Marketplace data encryption is managed by a third-party vendor.

  D. AWS Marketplace eliminates the need to upgrade to newer software versions.

  E. Users can deploy third-party software without testing.

  Correct Answer: AB

  Reference: https://aws.amazon.com/partners/aws-marketplace/

• Question 1890:

  Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?

  A. Amazon VPC

  B. AWS Direct Connect

  C. AWS Directory Service

  D. Amazon API Gateway

  Correct Answer: A

  Amazon Virtual Private Cloud (Amazon VPC) is a logically isolated, private section of the AWS Cloud to launch resources in a virtual data center in the cloud. Amazon VPC allows you to leverage multiple Availability Zones (AZ) within a region so that you can build greater fault tolerance within your workloads. You have complete control.

  Reference: https://aws.amazon.com/blogs/publicsector/aws-networking-capabilities-gives-you-choices-for-hybrid-cloud-connectivity-but-which-service-works-best-for-your-use-case/