Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 1991:

  When is it beneficial for a company to use a Spot Instance?

  A. When there is flexibility in when an application needs to run.

  B. When there are mission-critical workloads.

  C. When dedicated capacity is needed.

  D. When an instance should not be stopped.

  Correct Answer: A

  The key to understanding spot instances is to look at the way that cloud service providers such as Amazon Web Services (AWS) operate. Cloud service providers invest in hardware resources and then release those resources (often on a per-hour basis) to subscribers. One of the problems with this business model, however, is that at any given time, there are likely to be compute resources that are not being utilized. These resources represent hardware capacity that AWS has paid for but are sitting idle, and not making AWS any money at the moment.

  Rather than allowing these computing resources to go to waste, AWS offers them at a substantially discounted rate, with the understanding that if someone needs those resources for running a normal EC2 instance, that instance will take priority over spot instances that are using the hardware resources at a discounted rate. In fact, spot instances will be stopped if the resources are needed elsewhere.

  Reference: https://awsinsider.net/articles/2017/09/25/aws-spot-instances-primer.aspx

• Question 1992:

  Which scenarios represent the concept of elasticity on AWS? (Choose two.)

  A. Scaling the number of Amazon EC2 instances based on traffic.

  B. Resizing Amazon RDS instances as business needs change.

  C. Automatically directing traffic to less-utilized Amazon EC2 instances.

  D. Using AWS compliance documents to accelerate the compliance process.

  E. Having the ability to create and govern environments using code.

  Correct Answer: AB

  Reference: https://wa.aws.amazon.com/wat.concept.elasticity.en.html

• Question 1993:

  Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.)

  A. Maintaining the underlying Amazon EC2 hardware.

  B. Managing the VPC network access control lists.

  C. Encrypting data in transit and at rest.

  D. Replacing failed hard disk drives.

  E. Deploying hardware in different Availability Zones.

  Correct Answer: BC

  The hardware related jobs is the prime responsibility of AWS. VPC network access control lists is something a customer has to do himself to secure the applications. Encrypting data in transit and at rest is a shared responsibility in which AWS plays a part. All hardware related jobs have nothing to do with the customer. Reference: https://dzone.com/articles/aws-shared-responsibility-model-cloud-security

• Question 1994:

  When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.)

  A. Software development

  B. Project management

  C. Storage hardware

  D. Physical servers

  E. Antivirus software license

  Correct Answer: CD

  Reference: https://aws.amazon.com/blogs/aws/the-new-aws-tco-calculator/

• Question 1995:

  As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?

  A. Security management of data center

  B. Patch management

  C. Configuration management

  D. User and access management

  Correct Answer: D

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 1996:

  Which of the following services provides on-demand access to AWS compliance reports?

  A. AWS IAM

  B. AWS Artifact

  C. Amazon GuardDuty

  D. AWS KMS

  Correct Answer: B

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA).

  Reference: https://aws.amazon.com/artifact/

• Question 1997:

  Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.)

  A. It verifies that hosted workloads are automatically compliant with the controls of supported compliance frameworks.

  B. AWS is responsible for the maintenance of common compliance framework documentation.

  C. It assures customers that AWS is maintaining physical security and data protection.

  D. It ensures the use of compliance frameworks that are being used by other cloud providers.

  E. It will adopt new compliance frameworks as they become relevant to customer workloads.

  Correct Answer: AB

  Reference: https://d0.awsstatic.com/whitepapers/compliance/AWS_Risk_and_Compliance_Whitepaper.pdf

• Question 1998:

  What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called?

  A. AWS Direct Connects

  B. Amazon VPCs

  C. Edge locations

  D. Availability Zones

  Correct Answer: D

  Each Region is completely independent. Each Availability Zone is isolated, but the Availability Zones in a Region are connected through low-latency links. A Local Zone is an AWS infrastructure deployment that places select services closer to your end users. A Local Zone is an extension of a Region that is in a different location from your Region. It provides a high-bandwidth backbone to the AWS infrastructure and is ideal for latency-sensitive applications, for example machine learning. Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

• Question 1999:

  Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?

  A. Amazon Connect

  B. AWS Directory Service

  C. Amazon Pinpoint

  D. Amazon Rekognition

  Correct Answer: B

  Single sign-on only works when used on a computer that is joined to the AWS Directory Service directory. It cannot be used on computers that are not joined to the directory. Reference: https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_single_sign_on.html

• Question 2000:

  Which of the following are benefits of the AWS Cloud? (Choose two.)

  A. Unlimited uptime

  B. Elasticity

  C. Agility

  D. Colocation

  E. Capital expenses

  Correct Answer: BC

  The most celebrated benefit of AWS cloud is elasticity since you can expand the services when you experience more traffic. Agile developments in AWS Cloud through strategies are day by day becoming more established within the enterprises across the world. With so much improvement and call for optimization in the cloud, it is necessary that these strategies get established from the ground up within the organizations. It is highly important as already enterprises have a lot of bequest, politics and hierarchies which act as barriers in their businesses.

  Reference: https://www.botmetric.com/blog/evolution-agile-enterprises-aws-cloud/