Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 201:

  What is the LEAST expensive AWS Support plan that contains a full set of AWS Trusted Advisor best practice checks?

  A. AWS Enterprise Support

  B. AWS Business Support

  C. AWS Developer Support

  D. AWS Basic Support

  Correct Answer: B

  AWS Basic Support and AWS Developer Support customers can access core security checks and checks for service quotas. AWS Business Support and AWS Enterprise Support customers can access all checks, including cost optimization, security, fault tolerance, performance, and service quotas.

• Question 202:

  Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.)

  A. Resource configuration management

  B. Network data integrity

  C. Employee awareness and training

  D. Physical and environmental security

  E. Replacement and disposal of disk drives

  Correct Answer: AC

  Refer to: https://aws.amazon.com/compliance/shared-responsibility-model/

  Shared Controls ?Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include:

  1.

  Patch Management ?AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.

  2.

  Configuration Management ?AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

  3.

  Awareness and Training- AWS trains AWS employees, but a customer must train their own employees.

• Question 203:

  A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural

  guidance for business use cases. The company has a strong IT support team and does not need concierge support.

  Which AWS Support plan will meet these requirements at the LOWEST cost?

  A. AWS Basic Support

  B. AWS Developer Support

  C. AWS Business Support

  D. AWS Enterprise Support

  Correct Answer: C

  The answer should be C . 2 reasons

  1.

  for Contextual review Business is required not enterprise

  2.

  Also it doesn't need concierge which is mentioned in the question which straight away cancelled enterprise and the answer will be business

• Question 204:

  Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)

  A. Control access to AWS service APIs and to other specific resources.

  B. Provide intelligent threat detection and continuous monitoring.

  C. Protect the AWS environment using multi-factor authentication (MFA).

  D. Grant users access to AWS data centers.

  E. Provide firewall protection for applications from common web attacks.

  Correct Answer: AC

  AWS multi-factor authentication (MFA) is an AWS Identity and Access Management (IAM) best practice that requires a second authentication factor in addition to user name and password sign-in credentials. You can enable MFA at the AWS account level and for root and IAM users you have created in your account.

• Question 205:

  A company deployed an application on an Amazon EC2 instance. The application ran as expected for 6 months in the past week, users have reported latency issues. A system administrator found that the CPU utilization was at 100% during business hours. The company wants a scalable solution to meet demand. Which AWS service or feature should the company use to handle the load for its application during periods of high demand?

  A. Auto Scaling groups

  B. AWS Global Accelerator

  C. Amazon Route 53

  D. An Elastic IP address

  Correct Answer: A

  AWS Auto Scaling monitors your application and automatically adds or removes capacity from your resource groups in real-time as demands change.

• Question 206:

  A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection. Which AWS service should the company use to meet these requirements?

  A. AWS Backup

  B. AWS DataSync

  C. AWS Direct Connect

  D. AWS Snowball

  Correct Answer: C

  The answer is C because Data sync is a secure, online service that automates and accelerates moving data between on premises and AWS Storage services. whereas Direct connect is a network service that provides an alternative to using the Internet to utilize AWS cloud services. In this scenario the company wants to transfer the file for processing not storing C is the correct answer.

• Question 207:

  Which AWS service, feature, or tool uses machine learning to continuously monitor cost and usage for unusual cloud spending?

  A. Amazon Lookout for Metrics

  B. AWS Budgets

  C. Amazon CloudWatch

  D. AWS Cost Anomaly Detection

  Correct Answer: D

  D " AWS Cost Anomaly Detection is an AWS cost management feature that uses machine learning to continually monitor your cost and usage to detect unusual spends." ref https://docs.aws.amazon.com/wellarchitected/latest/managementand-governance-guide/aws-cloud- financial-management-services-and-tools.html

• Question 208:

  Which AWS service can a company use to perform complex analytical queries?

  A. Amazon RDS

  B. Amazon DynamoDB

  C. Amazon Redshift

  D. Amazon ElastiCache

  Correct Answer: C

  C. Amazon Redshift

  Amazon Redshift is a fully-managed, cloud-based data warehousing service that is designed for handling large-scale, complex analytical queries. It is optimized for querying and analyzing structured and semi- structured data using SQL,

  making it an excellent choice for companies that need to perform complex analytical queries.

• Question 209:

  Which AWS service can a company use to store and manage Docker images?

  A. Amazon DynamoDB

  B. Amazon Kinesis Data Streams

  C. Amazon Elastic Container Registry (Amazon ECR)

  D. Amazon Elastic File System (Amazon EFS)

  Correct Answer: C

  C is correct. Amazon Elastic Container Registry (ECR) is a highly available and secure private container repository that makes it easy to store and manage your Docker container images, encrypting and compressing images at rest so they are fast to pull and secure.

• Question 210:

  Which of the following are economic advantages of the AWS Cloud? (Choose two.)

  A. Increased workforce productivity

  B. Decreased need to encrypt user data

  C. Manual compliance audits

  D. Simpli ed total cost of ownership (TCO) accounting

  E. Faster product launches

  Correct Answer: AE

  A and E

  E: Business Agility: Deploying new features/ applications faster and reducing errors Example: Launch of new products 75% faster. https://aws.amazon.com/economics/