Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 2071:

  Which AWS service provides the ability to manage infrastructure as code?

  A. AWS CodePipeline

  B. AWS CodeDeploy

  C. AWS Direct Connect

  D. AWS CloudFormation

  Correct Answer: D

  AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment. CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. This file serves as the single source of truth for your cloud environment.

  Reference: https://aws.amazon.com/cloudformation/

• Question 2072:

  Which of the following is a benefit of using the AWS Cloud?

  A. Permissive security removes the administrative burden.

  B. Ability to focus on revenue-generating activities.

  C. Control over cloud network hardware.

  D. Choice of specific cloud hardware vendors.

  Correct Answer: B

  Developer and IT staff productivity accounted for nearly 30% of overall financial benefits. The remaining benefits were driven by the flexibility and agility of Amazon cloud infrastructure services, which make it easier to trial new business models, support revenue-generating applications, and provide more reliable services to end users.

  Reference: https://media.amazonwebservices.com/IDC_Business_Value_of_AWS_Accelerates_Over_time.pdf

• Question 2073:

  When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)?

  A. Dedicated Hosts

  B. Reserved Instances

  C. On-Demand Instances

  D. No Upfront Reserved Instances

  Correct Answer: A

  Use Dedicated Hosts to launch Amazon EC2 instances on physical servers that are dedicated for your use. Dedicated Hosts give you additional visibility and control over how instances are placed on a physical server, and you can reliably use the same physical server over time. As a result, Dedicated Hosts enable you to use your existing server-bound software licenses like Windows Server and address corporate compliance and regulatory requirements.

• Question 2074:

  Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS?

  A. AWS Marketplace

  B. Amazon Lumberyard

  C. AWS Artifact

  D. Amazon CloudSearch

  Correct Answer: A

  AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on AWS.

  Reference: https://aws.amazon.com

• Question 2075:

  Which task is AWS responsible for in the shared responsibility model for security and compliance?

  A. Granting access to individuals and services

  B. Encrypting data in transit

  C. Updating Amazon EC2 host firmware

  D. Updating operating systems

  Correct Answer: B

  AWS Compliance enables customers to establish and operate in an AWS security control environment The shared responsibility model is part of AWS Compliance program The Security of the cloud is managed by Amazon AWS provider The Security in the cloud is responsibility of the customer The customer is responsible for their information and data, their secure transmission, integrity, and encryption Also, the customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2 AWS customers retain control and ownership of their data The AWS network provides significant protection against traditional network security issues and the customer can implement further protection

  Reference: https://www.whizlabs.com/blog/aws-security-shared-responsibility/

• Question 2076:

  Which of the following are categories of AWS Trusted Advisor? (Choose two.)

  A. Fault Tolerance

  B. Instance Usage

  C. Infrastructure

  D. Performance

  E. Storage Capacity

  Correct Answer: AD

  Like your customized cloud expert, AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations in five categories: cost optimization, performance, security, fault tolerance and service limits. Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/

• Question 2077:

  Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

  A. AWS Personal Health Dashboard

  B. AWS Service Health Dashboard

  C. AWS Trusted Advisor

  D. AWS Infrastructure Event Management

  Correct Answer: A

  AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. While the Service Health Dashboard displays the general status of AWS services, Personal Health

  Dashboard gives you a personalized view into the performance and availability of the AWS services underlying your AWS resources.

  Reference: https://aws.amazon.com/premiumsupport/technology/personal-health-dashboard/

• Question 2078:

  Which AWS service allows companies to connect an Amazon VPC to an on-premises data center?

  A. AWS VPN

  B. Amazon Redshift

  C. API Gateway

  D. Amazon Direct Connect

  Correct Answer: D

  AWS Direct Connect enables you to securely connect your AWS environment to your on-premises data center or office location over a standard 1 gigabit or 10 gigabit Ethernet fiber-optic connection. AWS Direct Connect offers dedicated high speed, low latency connection, which bypasses internet service providers in your network path. An AWS Direct Connect location provides access to Amazon Web Services in the region it is associated with, as well as access to other US regions. AWS Direct Connect allows you to logically partition the fiber-optic connections into multiple logical connections called Virtual Local Area Networks (VLAN). You can take advantage of these logical connections to improve security, differentiate traffic, and achieve compliance requirements.

  Reference: https://aws.amazon.com/getting-started/projects/connect-data-center-to-aws/

• Question 2079:

  A company wants to reduce the physical compute footprint that developers use to run code. Which service would meet that need by enabling serverless architectures?

  A. Amazon Elastic Compute Cloud (Amazon EC2)

  B. AWS Lambda

  C. Amazon DynamoDB

  D. AWS CodeCommit

  Correct Answer: B

  AWS Lambda is an integral part of coding on AWS. It reduces physical compute footprint by utilizing aws cloud services to run code.

• Question 2080:

  Under the shared responsibility model, which of the following is a shared control between a customer and AWS?

  A. Physical controls

  B. Patch management

  C. Zone security

  D. Data center auditing

  Correct Answer: B