Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1901:

  Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?

  A. Amazon Inspector

  B. AWS Web Application Firewall (AWS WAF)

  C. Elastic Load Balancing (ELB)

  D. AWS Shield

  Correct Answer: D

  AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection. There are two tiers of AWS Shield- Standard and Advanced.

  Reference: https://aws.amazon.com/shield/

• Question 1902:

  What is an example of high availability in the AWS Cloud?

  A. Consulting AWS technical support at any time day or night

  B. Ensuring an application remains accessible, even if a resource fails

  C. Making any AWS service available for use by paying on demand

  D. Deploying in any part of the world using AWS Regions

  Correct Answer: B

  Reference: https://aws.amazon.com/blogs/startups/high-availability-for-mere-mortals/

• Question 1903:

  Which principles are used to architect applications for reliability on the AWS Cloud? (Choose two.)

  A. Design for automated failure recovery

  B. Use multiple Availability Zones

  C. Manage changes via documented processes

  D. Test for moderate demand to ensure reliability

  E. Backup recovery to an on-premises environment

  Correct Answer: AC

  Reference: https://aws.amazon.com/blogs/apn/the-5-pillars-of-the-aws-well-architected-framework/

• Question 1904:

  What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.)

  A. Rotate passwords and access keys.

  B. Remove MFA tokens.

  C. Move resources to a different AWS Region.

  D. Delete AWS CloudTrail Resources.

  E. Contact AWS Support.

  Correct Answer: AE

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/potential-account-compromise/

• Question 1905:

  A company hosts images in an Amazon S3 bucket for a public-facing website that is viewed by millions of users around the globe. Which AWS service will deliver this content with reduced latency?

  A. AWS WAF

  B. Amazon CloudWatch

  C. Amazon Cloud Front

  D. AWS CloudFormation

  Correct Answer: C

  Reference: https://aws.amazon.com/getting-started/hands-on/deliver-content-faster/

• Question 1906:

  A user wants guidance on possible savings when migrating from on-premises to AWS. Which tool is suitable for this scenario?

  A. AWS Budgets

  B. Cost Explorer

  C. AWS Total Cost of Ownership (TCO) Calculator

  D. AWS Well-Architected Tool

  Correct Answer: C

  The TCO Calculator provides directional guidance on possible realized savings when deploying AWS. This tool is built on an underlying calculation model, that generates a fair assessment of value that a customer may achieve given the data provided by the user.

  Reference: https://aws.amazon.com/tco-calculator/

• Question 1907:

  A company has refined its workload to use specific AWS services to improve efficiency and reduce cost. Which best practice for cost governance does this example show?

  A. Resource controls

  B. Cost allocation

  C. Architecture optimization

  D. Tagging enforcement

  Correct Answer: C

  Reference https://d1.awsstatic.com/whitepapers/architecture/AWS-Cost-Optimization-Pillar.pdf

• Question 1908:

  Which of the following services can be used to block network traffic to an instance? (Choose two.)

  A. Security groups

  B. Amazon Virtual Private Cloud (Amazon VPC) flow logs

  C. Network ACLs

  D. Amazon CloudWatch

  E. AWS CloudTrail

  Correct Answer: AC

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/ec2-block-or-allow-ips/

• Question 1909:

  A company wants to transfer petabytes of data as quickly as possible from on-premises locations to the AWS Cloud. Which AWS service should the company use?

  A. AWS Snowball

  B. AWS Global Accelerator

  C. Amazon S3 Transfer Acceleration

  D. Amazon Connect

  Correct Answer: A

  Reference: https://aws.amazon.com/getting-started/projects/migrate-petabyte-scale-data/

• Question 1910:

  A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts that it wants to interconnect. Which AWS service or feature should the company use to help simplify management and reduce operational costs?

  A. VPC endpoint

  B. AWS Direct Connect

  C. AWS Transit Gateway

  D. VPC peering

  Correct Answer: C

  Reference: https://d1.awsstatic.com/whitepapers/building-a-scalable-and-secure-multi-vpc-aws-network-infrastructure.pdf (9)