Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 1981:

  A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?

  A. Enable AWS Shield Advanced
  B. Create a custom IAM policy
  C. Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace
  D. Use AWS Key Management Service (AWS KMS) to create a customer-managed key
  B. Create a custom IAM policy

• Question 1982:

  A developer needs to use the AWS CLI on an on-premises development server temporarily to access AWS services while performing maintenance. The developer needs to authenticate to AWS with their identity for several hours. What is the MOST secure way to call AWS CLI commands with the developer's IAM identity?

  A. Specify the developer's IAM access key ID and secret access key as parameters for each CLI command
  B. Run the aws configure CLI command Provide the developer's IAM access key ID and secret access key
  C. Specify the developer's IAM profile as a parameter for each CLI command
  D. Run the get-session-token CLI command with the developer's IAM user. Use the returned credentials to call the CLI
  B. Run the aws configure CLI command Provide the developer's IAM access key ID and secret access key

• Question 1983:

  AWS Trusted Advisor provides recommendations on which of the following? (Choose two.)

  A. Cost optimization
  B. Auditing
  C. Serverless architecture
  D. Performance
  E. Scalability
  A. Cost optimization
  D. Performance

• Question 1984:

  Which AWS service enables users to create copies of resources across AWS Regions?

  A. Amazon ElastiCache
  B. AWS CloudFormation
  C. AWS CloudTrail
  D. AWS Systems Manager
  B. AWS CloudFormation

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html

• Question 1985:

  What does it mean to grant least privilege to AWS IAM users?

  A. It is granting permissions to a single user only.
  B. It is granting permissions using AWS IAM policies only.
  C. It is granting AdministratorAccess policy permissions to trustworthy users.
  D. It is granting only the permissions required to perform a given task.
  D. It is granting only the permissions required to perform a given task.

  ---

  Explanation/Reference:

  When you create IAM policies, follow the standard security advice of granting least privilege, or granting only the permissions required to perform a task. Determine what users (and roles) need to do and then craft policies that allow them to perform only those tasks.

  Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege

• Question 1986:

  Which AWS service or feature is associated with a subnet in a VPC and is used to control inbound and outbound traffic?

  A. Amazon Inspector
  B. Network ACLs
  C. AWS Shield
  D. VPC Flow Logs
  B. Network ACLs

• Question 1987:

  Which of the following automatically distributes application traffic across multiple targets, such as Amazon EC2 instances or containers?

  A. AWS Application Discovery Service
  B. AWS Resource Groups
  C. AWS Auto Scaling
  D. Elastic Load Balancing
  D. Elastic Load Balancing

• Question 1988:

  A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the ability to initiate automated actions against threats that are identified in the security findings. Which service will meet these requirements?

  A. AWS Trusted Advisor
  B. Amazon Detective
  C. Amazon Inspector
  D. Amazon GuardDuty
  D. Amazon GuardDuty

  ---

  Explanation/Reference:

  Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation. https://aws.amazon.com/guardduty/

• Question 1989:

  A company is planning to launch an ecommerce site in a single AWS Region to a worldwide user base.

  Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (Choose two.)

  A. Application Load Balancer
  B. AWS Global Accelerator
  C. AWS Direct Connect
  D. Amazon CloudFront
  E. AWS Lambda
  B. AWS Global Accelerator
  D. Amazon CloudFront

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/cloudfront/faqs/

• Question 1990:

  Which tool can be used to identify scheduled changes to the AWS infrastructure?

  A. AWS Personal Health Dashboard
  B. AWS Trusted Advisor
  C. Billing Dashboard
  D. AWS Config
  A. AWS Personal Health Dashboard