Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1911:

  The AWS IAM best practice for granting least privilege is to:

  A. apply an IAM policy to an IAM group and limit the size of the group.

  B. require multi-factor authentication (MFA) for all IAM users.

  C. require each IAM user who has different permissions to have multiple passwords.

  D. apply an IAM policy only to IAM users who require it.

  Correct Answer: D

  Reference: https://kirkpatrickprice.com/blog/best-practices-for-privilege-management-in-aws/

• Question 1912:

  Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?

  A. Pay-as-you-go pricing

  B. High availability

  C. Global reach

  D. Economies of scale

  Correct Answer: D

  Reference: https://innovationtactics.com/amazon-business-model-amazon-web-services/

• Question 1913:

  A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimize cost and maximize flexibility. Which Amazon EC2 instance type should the company use to meet these requirements?

  A. On-Demand Instances

  B. Spot Instances

  C. Reserved Instances

  D. Dedicated Hosts

  Correct Answer: A

  Reference: https://aws.amazon.com/ec2/faqs/

• Question 1914:

  A company wants to track AWS resource configuration changes for compliance reasons. Which AWS feature can be used to meet this requirement?

  A. AWS Cost and Usage Report

  B. AWS Organizations service control policies (SCPs)

  C. AWS Config rules

  D. VPC Flow Logs

  Correct Answer: C

  Reference: https://aws.amazon.com/config/

• Question 1915:

  An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What it the SIMPLEST way to provide this information?

  A. Create an IAM user account for the auditor, granting the auditor administrator permissions.

  B. Take a screenshot of each user's page in the AWS Management Console, then provide the screenshots to the auditor.

  C. Download the IAM credential report, then provide the report to the auditor.

  D. Download the AWS Trusted Advisor report, then provide the report to the auditor.

  Correct Answer: C

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html

• Question 1916:

  A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting. Which AWS service should the company use?

  A. Amazon GuardDuty

  B. AWS WAF

  C. AWS Trusted Advisor

  D. Amazon Inspector

  Correct Answer: B

  Reference: https://aws.amazon.com/waf/faq/

• Question 1917:

  A company wants to ensure its infrastructure is designed for fault tolerance and business continuity in the event of an environmental disruption. Which AWS infrastructure component should the company replicate across?

  A. Edge locations

  B. Availability Zones

  C. Regions

  D. Amazon Route 53

  Correct Answer: B

  Reference: https://d36cz9buwru1tt.cloudfront.net/AWS_Building_Fault_Tolerant_Applications.pdf (3)

• Question 1918:

  Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

  A. AWS Secrets Manager

  B. Amazon Cognito

  C. Amazon Macie

  D. AWS Trusted Advisor

  Correct Answer: D

  Reference: https://www.coalfire.com/the-coalfire-blog/march-2019/aws-trusted-advisor-for-security-compliance

• Question 1919:

  Which services manage and automate application deployments on AWS? (Choose two.)

  A. AWS Elastic Beanstalk

  B. AWS CodeCommit

  C. AWS Data Pipeline

  D. AWS CloudFormation

  E. AWS Config

  Correct Answer: BC

  Reference: https://aws.amazon.com/getting-started/tutorials/continuous-deployment-pipeline/

• Question 1920:

  A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs).

  Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)

  A. Create an IAM user and provide AWS Management Console access only.

  B. Create an IAM user and provide programmatic access only.

  C. Create an IAM role and provide AWS Management Console access only.

  D. Create an IAM policy with administrator access and attach it to the IAM user.

  E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.

  Correct Answer: BE