Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 181:

  A company needs to identify personally identifiable information (PII), such as credit card numbers, from data that is stored in Amazon S3. Which AWS service should the company use to meet this requirement?

  A. Amazon Inspector

  B. AWS Shield

  C. Amazon GuardDuty

  D. Amazon Macie

  Correct Answer: D

  Macie automatically detects a large and growing list of sensitive data types, including personally identifiable information (PII) such as names, addresses, and credit card numbers. It also gives you constant visibility of the data security and data privacy of your data stored in Amazon S3.

• Question 182:

  Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Choose two.)

  A. VPC endpoint

  B. Virtual private gateway

  C. AWS Shield Standard

  D. AWS config

  E. AWS WAF

  Correct Answer: CE

  Answers are C and E.

  AWS Shield Standard is a managed DDoS protection service that safeguards web applications running on AWS by automatically detecting and mitigating DDoS attacks.

  AWS WAF (Web Application Firewall) is a managed service that provides protection against common web exploits and attacks, such as SQL injections and cross-site scripting, by allowing customers to create custom security rules.

• Question 183:

  Which statements explain the business value of migration to the AWS Cloud? (Choose two.)

  A. The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices.

  B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.

  C. Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery.

  D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas.

  E. Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all enterprise applications.

  Correct Answer: BD

  The business value of migration to the AWS Cloud is:

  B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime. D. Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas. B. Migrating to the AWS Cloud provides access to the AWS global infrastructure, which offers high availability and security to businesses. AWS provides SLA's that guarantee service availability and reduce unplanned downtime. This enhances the customer experience and reduces business risk.

  D. Migrating to AWS provides businesses with an opportunity to reduce IT costs related to infrastructure. With AWS, there are no upfront costs or long-term commitments, and businesses only pay for the resources they use. AWS provides an elastic infrastructure, which allows businesses to scale up or down based on demand, which helps save costs.

• Question 184:

  Which AWS service is used to host static websites?

  A. Amazon S3

  B. Amazon Elastic Block Store (Amazon EBS)

  C. AWS CloudFormation

  D. Amazon Elastic File System (Amazon EFS)

  Correct Answer: A

  S3 = Secure, durable, and scalable object storage infrastructure. S3 can be used to host static websites to deliver HTML, JavaScript, images, and video for sites that do not contain server-side scripting.

• Question 185:

  A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be

  completed automatically.

  What should the company do to meet these requirements?

  A. Deploy MySQL database server clusters on Amazon EC2 instances.

  B. Use Amazon RDS with a MySQL database.

  C. Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.

  D. Migrate all the MySQL database data to Amazon S3.

  Correct Answer: B

  Secret here is the company wants to automate this repetitive tasks, AWS RDS is a relational database server that automatically updates the SQL database so you just worry about the data. (Serverless)

• Question 186:

  What is the primary use case for Amazon GuardDuty?

  A. Prevention of DDoS attacks

  B. Protection against SQL injection attacks

  C. Automatic monitoring for threats to AWS workloads

  D. Automatic provisioning of AWS resources

  Correct Answer: C

  "Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation."

• Question 187:

  Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting?

  A. AWS WAF

  B. AWS Shield Advanced

  C. Amazon GuardDuty

  D. Amazon Detective

  Correct Answer: A

  AWS WAF helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.

• Question 188:

  A company owns per-core software licenses.

  Which Amazon EC2 instance purchasing option must the company use for this license type?

  A. Reserved Instances

  B. Dedicated Hosts

  C. Spot Instances

  D. Dedicated Instances

  Correct Answer: B

  B. Dedicated Hosts.

  Dedicated Hosts ?Pay for a physical host that is fully dedicated to running your instances, and bring your existing per-socket, per-core, or per-VM software licenses to reduce costs.

• Question 189:

  A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third- party provider. Which AWS service should the company use to meet these requirements?

  A. AWS Single Sign-On

  B. AWS Signer

  C. Amazon Cognito

  D. AWS Directory Service

  Correct Answer: C

  Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

• Question 190:

  Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded?

  A. AWS Budgets

  B. AWS Trusted Advisor

  C. AWS CloudTrail

  D. AWS Support

  Correct Answer: A