Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1891:

  Which solution provides the FASTEST application response times to frequently accessed data to users in multiple AWS Regions?

  A. AWS CloudTrail across multiple Availability Zones
  B. Amazon CloudFront to edge locations
  C. AWS CloudFormation in multiple regions
  D. A virtual private gateway over AWS Direct Connect
  B. Amazon CloudFront to edge locations

  ---

  Explanation/Reference:

  You can deliver content and decrease end-user latency of your web application using Amazon CloudFront. CloudFront speeds up content delivery by leveraging its global network of data centers, known as edge locations, to reduce delivery time by caching your content close to your end users. CloudFront fetches your content from an origin, such as an Amazon S3 bucket, an Amazon EC2 instance, an Amazon Elastic Load Balancing load balancer or your own web server, when it's not already in an edge location. CloudFront can be used to deliver your entire website or application, including dynamic, static, streaming, and interactive content.

  Reference: https://aws.amazon.com/getting-started/tutorials/deliver-content-faster/

• Question 1892:

  Which AWS services offer compute capabilities? (Choose two.)

  A. Amazon EC2
  B. Amazon S3
  C. Amazon Elastic Block Store (Amazon EBS)
  D. Amazon Cognito
  E. AWS Lambda
  A. Amazon EC2
  E. AWS Lambda

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/compute-services.html

• Question 1893:

  How can a user protect against AWS service disruptions if a natural disaster affects an entire geographic area?

  A. Deploy applications across multiple Availability Zones within an AWS Region.
  B. Use a hybrid cloud computing deployment model within the geographic area.
  C. Deploy applications across multiple AWS Regions.
  D. Store application artifacts using AWS Artifact and replicate them across multiple AWS Regions.
  C. Deploy applications across multiple AWS Regions.

  ---

  Explanation/Reference:

  An AWS Region is a geographic location where AWS provides multiple, physically separated and isolated Availability Zones which are connected with low latency, high throughput, and highly redundant networking.

  Reference: https://aws.amazon.com/s3/faqs/

• Question 1894:

  According to the AWS shared responsibility model, the customer is responsible for maintaining:

  A. physical access to the AWS network.
  B. the patching of the host operating system.
  C. data encryption in Amazon S3.
  D. the operating system for Amazon DynamoDB.
  C. data encryption in Amazon S3.

• Question 1895:

  Which AWS service or tool is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic?

  A. AWS WAF
  B. AWS Shield
  C. Network access control list (ACL)
  D. Security group
  D. Security group

  ---

  Explanation/Reference:

  D. Security group

  A security group is an AWS service or tool that is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic. Security groups enable you to specify which traffic is allowed to reach your instances, based on a set of rules that you define. Security groups act at the instance level, not the subnet level, so each instance in a subnet in your VPC must be associated with a security group. You can add or remove rules from a security group at any time, and you can associate multiple security groups with a single instance.

  AWS WAF is a web application firewall that helps protect web applications from common web exploits, AWS Shield is a service that provides DDoS protection for web applications hosted on AWS, and Network access control list (ACL) is another service that controls traffic in and out of a VPC, but it acts at the subnet level, not the instance level like security groups.

• Question 1896:

  A company needs to log information that shows all the AWS resources that the company has launched and terminated. Which AWS service can the company use to meet this requirement?

  A. AWS Trusted Advisor
  B. Amazon CloudWatch
  C. AWS Config
  D. AWS CloudTrail
  C. AWS Config

• Question 1897:

  Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2?

  A. AWS IAM
  B. Amazon Connect
  C. Amazon VPC
  D. Amazon API Gateway
  C. Amazon VPC

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Security.html

• Question 1898:

  Which AWS service is designed to help users build conversational interfaces into applications using voice and text?

  A. Amazon Lex
  B. Amazon Transcribe
  C. Amazon Comprehend
  D. Amazon Timestream
  A. Amazon Lex

• Question 1899:

  Which IPv4 internet address for Amazon EC2 instances is billed at an hourly rate?

  A. A dynamic IP address that is requested in excess of the Regional limit for each account
  B. An Elastic IP address that is associated with an EC2 instance that is running
  C. An Elastic IP address that is not associated with an EC2 instance that is running
  D. A bring your own IP address (BYOIP) that is assigned to an EC2 instance that is running
  C. An Elastic IP address that is not associated with an EC2 instance that is running

• Question 1900:

  Which of the following are security best practices for using AWS Identity and Access Management (IAM)? (Select TWO)

  A. Use AWS account root user credentials for IAM tasks
  B. Rotate credentials regularly
  C. Do not remove credentials, even if they are never used
  D. Enable multi-factor authentication (MFA)
  E. Use inline policies instead of customer managed policies
  A. Use AWS account root user credentials for IAM tasks
  B. Rotate credentials regularly