Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1901:

  A company wants to use the AWS Cloud to define its entire infrastructure as code. The company wants to limit human error and activate consistent responses to events. Which pillar of the AWS Well-Architected Framework does this plan support?

  A. Security
  B. Operational excellence
  C. Cost optimization
  D. Reliability
  B. Operational excellence

  ---

  Explanation/Reference:

  Operational excellence.

  By performing operations as code, you limit human error and enable consistent responses to events. https://docs.aws.amazon.com/wellarchitected/latest/framework/oe-design-principles.html

• Question 1902:

  Which benefit of cloud computing gives a company the ability to deploy applications to users all over the world through a network of AWS Regions, Availability Zones, and edge locations?

  A. Economy of scale
  B. Global reach
  C. Agility
  D. High availability
  B. Global reach

• Question 1903:

  An ecommerce company has Amazon EC2 instances running as web servers. There is a predictable pattern of peak traffic load that occurs two times each day, always at the same time. The EC2 instances are idle for the remainder of the day.

  What is the MOST cost-effective way to manage these resources while maintaining fault tolerance?

  A. Use an Auto Scaling group to scale resources in and out based on demand.
  B. Purchase Reserved Instances to ensure peak capacity at all times.
  C. Write a cron job to stop the EC2 instances when the traffic demand is low.
  D. Write a script to vertically scale the EC2 instances during peak traffic demand.
  A. Use an Auto Scaling group to scale resources in and out based on demand.

• Question 1904:

  A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles. Which AWS service can be used to meet this requirement?

  A. AWS Systems Manager
  B. AWS CloudFormation
  C. AWS CodeCommit
  D. AWS config
  B. AWS CloudFormation

  ---

  Explanation/Reference:

  Infrastructure as code is the process of provisioning and managing your cloud resources by writing a template file that is both human readable, and machine consumable. For AWS cloud development the built-in choice for infrastructure as code is AWS CloudFormation.

• Question 1905:

  A company is designing a new application that will store and retrieve millions of photos and videos.

  Which AWS service or feature can provide the underlying storage at the LOWEST cost?

  A. Amazon EC2 instance store
  B. Amazon Elastic Block Store (Amazon EBS)
  C. Amazon S3
  D. Amazon Simple Queue Service (Amazon SQS)
  A. Amazon EC2 instance store

• Question 1906:

  Which AWS services or features can control VPC traffic? (Choose two.)

  A. Security groups
  B. AWS Direct Connect
  C. Amazon GuardDuty
  D. Network ACLs
  E. Amazon Connect
  A. Security groups
  D. Network ACLs

  ---

  Explanation/Reference:

  Security Groups and Network ACLs are built in ways to control VPC's and their traffic both inbound and outbound.

• Question 1907:

  A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations. What should the user do to meet this requirement?

  A. Use AWS Secrets Manager.
  B. Tag the objects in the S3 bucket.
  C. Use security groups.
  D. Use network ACLs.
  B. Tag the objects in the S3 bucket.

  ---

  Explanation/Reference:

  Secrets Manager is for secrets (passwords)

  Network ACL is a statekless firewall working on IPs, not users. Security Groups are stateful firewall, not for user permissions.

  In this case I'd say tags:

  https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html "Object tags enable fine-grained access control of permissions. For example, you could grant an IAM user permissions to read-only objects with specific tags."

• Question 1908:

  If a company wants to build an interactive chatbot to make a call center more efficient, which AWS service should be used?

  A. Amazon Connect
  B. Amazon Lex
  C. Amazon Translate
  D. Amazon Polly
  B. Amazon Lex

• Question 1909:

  Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

  A. Users can implement all AWS services in seconds.
  B. AWS assumes all responsibility for the security of infrastructure and applications.
  C. Users experience increased speed and agility.
  D. Users benefits from massive economies of scale.
  E. Users can more hardware from their data center to the AWS Cloud.
  C. Users experience increased speed and agility.
  D. Users benefits from massive economies of scale.

• Question 1910:

  A company is running applications on Amazon EC2 instances in the same AWS account for several different projects. The company wants to track the infrastructure costs for each of the projects separately. The company must conduct this tracking with the least possible impact to the existing infrastructure and with no additional cost.

  What should the company do to meet these requirements?

  A. Use a different EC2 instance type for each project.
  B. Publish project-specific custom Amazon CloudWatch metrics for each application.
  C. Deploy EC2 instances for each project in a separate AWS account.
  D. Use cost allocation tags with values that are specific to each project.
  D. Use cost allocation tags with values that are specific to each project.

  ---

  Explanation/Reference:

  Cost allocation tags does the function with "least amount of effort and no extra cost"