Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 2041:

  Which of the following is a component of the shared responsibility model managed entirely by AWS?

  A. Patching operating system software

  B. Encrypting data

  C. Enforcing multi-factor authentication

  D. Auditing physical data center assets

  Correct Answer: D

  Of course, Amazon is responsible for auditing physical data center assets and resources since it is the property of Amazon Inc. Customers have no access to physical sites, hence they are not responsible for maintaining physical data center assets.

• Question 2042:

  Which of the following is an important architectural design principle when designing cloud applications?

  A. Use multiple Availability Zones.

  B. Use tightly coupled components.

  C. Use open source software.

  D. Provision extra capacity.

  Correct Answer: A

  Data Center resilience is practiced through Availability Zones across data centers that reduce the impact of failures.

  Fault isolation improvement can be made to traditional horizontal scaling by sharding (a method of grouping instances into groups called shards, instead of sending the traffic from all users to every node like in the traditional IT structure.)

  Reference: https://www.botmetric.com/blog/aws-cloud-architecture-design-principles/

• Question 2043:

  Amazon Relational Database Service (Amazon RDS) offers which of the following benefits over traditional database management?

  A. AWS manages the data stored in Amazon RDS tables.

  B. AWS manages the maintenance of the operating system.

  C. AWS automatically scales up instance types on demand.

  D. AWS manages the database type.

  Correct Answer: C

• Question 2044:

  Which AWS support plan includes a dedicated Technical Account Manager?

  A. Developer

  B. Enterprise

  C. Business

  D. Basic

  Correct Answer: B

  The enterprise support plans supports technical account manager. Developer and business support plans are devoid of this facility. Reference: https://aws.amazon.com/premiumsupport/plans/

• Question 2045:

  Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

  A. Amazon RDS

  B. Amazon EC2

  C. Amazon ElastiCache

  D. AWS Fargate

  Correct Answer: B

  The customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2. Reference: https://www.whizlabs.com/blog/aws-security-shared-responsibility/

• Question 2046:

  Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?

  A. Amazon Glacier

  B. AWS Snowball

  C. AWS Storage Gateway

  D. Amazon Elastic Block Storage (Amazon EBS)

  Correct Answer: C

  AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. Customers use Storage Gateway to simplify storage management and reduce costs for key hybrid cloud storage use cases. These include moving tape backups to the cloud, reducing on-premises storage with cloud-backed file shares, providing low latency access to data in AWS for on-premises applications, as well as various migration, archiving, processing, and disaster recovery use cases.

  Reference: https://aws.amazon.com/storagegateway/?whats-new-cards.sort-by=item.additionalFields.postDateTimeandwhats-new-cards.sort-order=desc

• Question 2047:

  Which of the following security measures protect access to an AWS account? (Choose two.)

  A. Enable AWS CloudTrail.

  B. Grant least privilege access to IAM users.

  C. Create one IAM user and share with many developers and users.

  D. Enable Amazon CloudFront.

  E. Activate multi-factor authentication (MFA) for privileged users.

  Correct Answer: BE

  If you decided to create service accounts (that is, accounts used for programmatic access by applications running outside of the AWS environment) and generate access keys for them, you should create a dedicated service account for each use case. This will allow you to restrict the associated policy to only the permissions needed for the particular use case, limiting the blast radius if the credentials are compromised. For example, if a monitoring tool and a release management tool both require access to your AWS environment, create two separate service accounts with two separate policies that define the minimum set of permissions for each tool.

  Reference: https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using-programmatic-access/

• Question 2048:

  The financial benefits of using AWS are: (Choose two.)

  A. reduced Total Cost of Ownership (TCO).

  B. increased capital expenditure (capex).

  C. reduced operational expenditure (opex).

  D. deferred payment plans for startups.

  E. business credit lines for stratups.

  Correct Answer: AC

• Question 2049:

  Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?

  A. AWS Cost Explorer

  B. AWS Budgets

  C. AWS Cost and Usage report

  D. AWS Billing dashboard

  Correct Answer: C

  The Cost and Usage Report is your one-stop-shop for accessing the most granular data about your AWS costs and usage. You can also load your cost and usage information into Amazon Athena, Amazon Redshift, AWS QuickSight, or a tool of your choice.

  Reference: https://aws.amazon.com/aws-cost-management/

• Question 2050:

  Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster?

  A. AWS Concierge

  B. AWS CloudFormation

  C. Amazon Simple Storage Service (Amazon S3)

  D. Amazon EC2 Auto Scaling

  E. AWS Management Console

  Correct Answer: AB