Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 2021:

  Which AWS service or feature allows users to connect with and deploy AWS services programmatically?

  A. AWS Management Console
  B. AWS Cloud9
  C. AWS CodePipeline
  D. AWS software development kits (SDKs)
  D. AWS software development kits (SDKs)

• Question 2022:

  A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket. Which AWS service will integrate directly with the event notification?

  A. AWS Lambda
  B. Amazon EC2
  C. Amazon Elastic Container Registry (Amazon ECR)
  D. AWS Elastic Beanstalk
  A. AWS Lambda

• Question 2023:

  Which AWS services may be scaled using AWS Auto Scaling? (Choose two.)

  A. Amazon EC2
  B. Amazon DynamoDB
  C. Amazon S3
  D. Amazon Route 53
  E. Amazon Redshift
  A. Amazon EC2
  B. Amazon DynamoDB

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/autoscaling/faqs/

• Question 2024:

  Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?

  A. Amazon GuardDuty
  B. Amazon Macie
  C. Amazon Inspector
  D. AWS Shield
  B. Amazon Macie

  ---

  Explanation/Reference:

  Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS. As organizations manage growing volumes of data, identifying and protecting their sensitive data at scale can become increasingly complex, expensive, and time-consuming. Amazon Macie automates the discovery of sensitive data at scale and lowers the cost of protecting your data. Macie automatically provides an inventory of Amazon S3 buckets including a list of unencrypted buckets, publicly accessible buckets, and buckets shared with AWS accounts outside those you have defined in AWS Organizations. Then, Macie applies machine learning and pattern matching techniques to the buckets you select to identify and alert you to sensitive data, such as personally identifiable information (PII). Macie's alerts, or findings, can be searched and filtered in the AWS Management Console and sent to Amazon EventBridge, formerly called Amazon CloudWatch Events, for easy integration with existing workflow or event management systems, or to be used in combination with AWS services, such as AWS Step Functions to take automated remediation actions. This can help you meet regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) and General Data Privacy Regulation (GDPR). You can get started with Amazon Macie by leveraging the 30-day free trial for bucket evaluation. The trial includes 30-days of Amazon S3 bucket inventory and bucket- level security and access control assessment at no cost. Note that sensitive data discovery is not included in the 30day free trial for bucket evaluation. Benefits Discover your sensitive data at scale Amazon Macie uses machine learning and pattern matching to cost efficiently discover sensitive data at scale. Macie automatically detects a large and growing list of sensitive data types, including personal identifiable information (PII) such as names, addresses, and credit card numbers. The service also allows you to define your own custom sensitive data types so you can discover and protect the sensitive data that may be unique to your business or use case. Visibility of your data security posture Amazon Macie gives you constant visibility of the data security and data privacy of your data stored in Amazon S3. Macie automatically and continually evaluates all of your S3 buckets and alerts you to any unencrypted buckets, publicly accessible buckets, or buckets shared with AWS accounts outside those you have defined in the AWS Organizations. Macie provides native multi-account support so you can view your data security posture across your entire S3 environment from a single Macie administrator account. Easy to setup and manage Getting started with Amazon Macie is fast and easy with one-click in the AWS Management Console or a single API call. Macie provides multi-account support using AWS Organizations, so you can enable Macie across all of your accounts with a few clicks. Macie maintains a fully-managed set of sensitive data types, so there is no custom configuration required.

  Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS. Macie recognizes sensitive data such as personally identifiable information (PII) or intellectual property. It provides you with dashboards and alerts that give visibility into how this data is being accessed or moved.

  Reference: https://docs.aws.amazon.com/macie/latest/userguide/what-is-macie.html

• Question 2025:

  A company stores documents in Amazon S3 with default settings A new regulation requires the company to encrypt the documents at rest, rotate the encryption keys annually, and keep a record of when the encryption keys were rotated. The company does not want to manage the encryption keys outside of AWS.

  Which solution will meet these requirements?

  A. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3).
  B. Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS)
  C. Use server-side encryption with customer-provided encryption keys (SSE-C)
  D. Use client-side encryption before sending the data to Amazon S3
  C. Use server-side encryption with customer-provided encryption keys (SSE-C)

• Question 2026:

  A company wants to deploy a web application on AWS that serves audio and video content. Which AWS service would provide high availability and scalability in this situation?

  A. Amazon Elastic Block Store (Amazon EBS)
  B. Amazon EC2
  C. AWS Storage Gateway
  D. Amazon S3
  D. Amazon S3

• Question 2027:

  Which controls are shared under the AWS shared responsibility model? (Choose two.)

  A. Awareness and training
  B. Patching of Amazon RDS
  C. Configuration management
  D. Physical and environmental controls
  E. Service and communications protection or security
  A. Awareness and training
  C. Configuration management

  ---

  Explanation/Reference:

  In the AWS shared security model, a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services.

  Examples of shared controls include:

  *Patch Management AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. *Configuration Management AWS maintains the configuration of its

  infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

  *Awareness and Training AWS trains AWS employees, but a customer must train their own employees.

  Customer Specific Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services.

  Examples of customer specific controls include:

  *Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/#:~:text=Shared%20Controls %20?20Controls%20which%20apply,their%20use%20of%20AWS%20services.

• Question 2028:

  An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console. Which AWS service should be used to determine what action made this EC2 instance inaccessible?

  A. Amazon CloudWatch Logs
  B. AWS Security Hub
  C. Amazon Inspector
  D. AWS CloudTrail
  D. AWS CloudTrail

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/troubleshooting-launch.html

• Question 2029:

  A company needs to centralize the periodic backups that are being created for Amazon EC2 instances and an Amazon Elastic File System (Amazon EFS) file system. Which AWS service will meet this requirement with MINIMAL operational effort?

  A. Amazon S3
  B. AWS Data Pipeline
  C. AWS Backup
  D. AWS Storage Gateway
  C. AWS Backup

  ---

  Explanation/Reference:

  The correct answer is C. AWS Backup.

  AWS Backup is a fully managed backup service that makes it easy to centralize and automate the backup of data across AWS services such as Amazon EC2 instances and Amazon EFS file systems. AWS Backup provides a centralized backup console, backup policies, and backup lifecycle management, which makes it easy to configure and manage backups with minimal operational effort.

• Question 2030:

  Which tool should a developer use to integrate AWS service features directly into an application?

  A. AWS Software Development Kit
  B. AWS CodeDeploy
  C. AWS Lambda
  D. AWS Batch
  A. AWS Software Development Kit