Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 211:

  A company needs to deliver new website features quickly in an iterative manner to minimize the time to market. Which AWS Cloud concept does this requirement represent?

  A. Reliability

  B. Elasticity

  C. Agility

  D. High availability

  Correct Answer: C

• Question 212:

  Which AWS service tracks API calls and user activity?

  A. AWS Organizations

  B. AWS config

  C. Amazon CloudWatch

  D. AWS CloudTrail

  Correct Answer: D

  D. CloudTrail AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and remediation actions.

• Question 213:

  A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group. Which AWS service or feature can the company use to meet these requirements?

  A. AWS Organizations

  B. Resource groups

  C. Resource tagging

  D. AWS Identity and Access Management (IAM)

  Correct Answer: D

  D. Amazon Identity and Access Management (IAM)

  AWS Identity and Access Management (IAM) roles provide a way to access AWS by relying on temporary security credentials. Each role has a set of permissions for making AWS service requests, and a role is not associated with a specific user or group.

• Question 214:

  A company has an online shopping website and wants to store customers' credit card data. The company must meet Payment Card Industry (PCI) standards. Which service can the company use to access AWS compliance documentation?

  A. Amazon Cloud Directory

  B. AWS Artifact

  C. AWS Trusted Advisor

  D. Amazon Inspector

  Correct Answer: B

  The service that the company can use to access AWS compliance documentation is AWS Artifact (Option B).

  AWS Artifact is a service that provides on-demand access to AWS compliance documentation, including PCI compliance documentation. It offers several types of compliance reports, including PCI Data Security Standard (PCI DSS) reports, which help companies understand how AWS meets the PCI DSS requirements. Companies can use AWS Artifact to download these reports and provide them to auditors as evidence of compliance with industry standards.

• Question 215:

  Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

  A. Amazon CloudWatch

  B. AWS Trusted Advisor

  C. AWS CloudTrail

  D. Amazon Inspector

  Correct Answer: C

• Question 216:

  A company wants to use machine learning to identify suspicious activities in its AWS account. Which AWS service provides this functionality?

  A. AWS Shield

  B. Amazon Macie

  C. Amazon Detective

  D. AWS WAF

  Correct Answer: C

  Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS. While it can identify potential security risks by detecting sensitive data in storage, it is not specifically designed for identifying suspicious activities in an AWS account. On the other hand, Amazon Detective is specifically designed to analyze, investigate, and identify the root cause of security events and suspicious activities in an AWS account. It uses machine learning, statistical analysis, and graph theory to create a visual graph of an account's resources and behaviors, making it easier to identify and investigate potential security threats. Therefore, Amazon Detective is the correct answer for the given question.

• Question 217:

  A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket.

  Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead?

  A. Amazon EC2

  B. AWS Code Deploy

  C. AWS Lambda

  D. Amazon Lightsail

  Correct Answer: C

• Question 218:

  A cloud engineer needs to track AWS costs. The cloud engineer also needs to receive event driven alerts when costs exceed specific thresholds. Which AWS tool provides this functionality?

  A. AWS Cost Explorer

  B. AWS Budgets

  C. Cost allocation tags

  D. AWS Cost and Usage Reports

  Correct Answer: B

  The AWS tool that provides this functionality is B. AWS Budgets.

  AWS Budgets is a service that allows customers to set budgets for their AWS usage costs and receive alerts when actual costs exceed those budgets. By using budgets, the engineer can create a customized budget plan and put constraints on the spending of resources. It allows to set custom budgets, track costs and usage across multiple dimensions, and receive alerts when certain thresholds are exceeded.

  AWS Cost Explorer is a service that allows users to visualize, understand and manage their AWS costs, AWS Cost and Usage Reports provides detailed cost and usage information, Cost allocation tags are used for identifying and organizing AWS costs, but none of these services provide the event-driven alerts when costs exceed specific thresholds.

• Question 219:

  A company wants to migrate its on-premises data warehouse to AWS. The information in the data warehouse is used to populate analytics dashboards. Which AWS service should the company use for the data warehouse?

  A. Amazon ElastiCache

  B. Amazon Aurora

  C. Amazon RDS

  D. Amazon Redshift

  Correct Answer: D

  D. Amazon Redshift

  Tens of thousands of customers today rely on Amazon Redshift to analyze exabytes of data and run complex analytical queries, making it a widely used cloud data warehouse. Run and scale analytics in seconds on all your data without

  having to manage your data warehouse infrastructure.

  Ref link: https://aws.amazon.com/redshift/#:~:text=to%20Amazon%20Redshift-,Tens%20of%20thousands %20of%20customers%20today%20rely%20on%20Amazon%20Redshift,manage%20your%20data% 20warehouse%20infrastructure.

• Question 220:

  Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)?

  A. AWS Basic Support

  B. AWS Developer Support

  C. AWS Business Support

  D. AWS Enterprise Support

  Correct Answer: D