Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 221:

  Which of the following contribute to total cost of ownership of a workload running in the AWS Cloud? (Choose two.)

  A. Hardware maintenance
  B. Power and cooling
  C. Storage costs
  D. Space for data center
  E. Network costs
  C. Storage costs
  E. Network costs

• Question 222:

  What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.)

  A. Rotate passwords and access keys.
  B. Remove MFA tokens.
  C. Move resources to a different AWS Region.
  D. Delete AWS CloudTrail Resources.
  E. Contact AWS Support.
  A. Rotate passwords and access keys.
  E. Contact AWS Support.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/potential-account-compromise/

• Question 223:

  Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud?

  A. Compute instances can be launched and terminated as needed to optimize costs.
  B. Compute costs can be viewed in the AWS Billing and Cost Management console.
  C. Users retain full administrative access to their compute instances.
  D. Users can optimize costs by permanently running enough instances at peak load.
  A. Compute instances can be launched and terminated as needed to optimize costs.

• Question 224:

  Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs?

  A. Enterprise
  B. Business
  C. Developer
  D. Basic
  B. Business

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/plans/

• Question 225:

  A company needs to implement an AWS data warehouse solution that can manage petabytes of data. A reporting application will perform online analytic processing (OLAP) queries on the data. Which AWS service should the company use to meet these requirements?

  A. Amazon Elastic File System (Amazon EFS)
  B. Amazon Redshift
  C. Amazon RDS for MySQL
  D. Amazon DynamoDB
  B. Amazon Redshift

• Question 226:

  A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud. Which AWS service will meet this requirement?

  A. Amazon Cognito
  B. AWS Security Hub
  C. AWS Shield
  D. AWS WAF
  A. Amazon Cognito

  ---

  Explanation/Reference:

  A ?Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.

  AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated remediation. Not relevant.

  AWS Shield and AWS WAF are for threat protection (Shield for DDoS, WAF for SQL injections), not relevant to the question.

• Question 227:

  Which of the following IT tasks does AWS perform to offload a company's IT resource management responsibilities? (Select TWO.)

  A. Configuring operating system firewalls
  B. Setting up access controls for data
  C. Backing up databases
  D. Configuring database user accounts
  E. Installing operating systems
  C. Backing up databases
  E. Installing operating systems

• Question 228:

  Which of the following are benefits of running a database on Amazon RDS compared to an on- premises database? (Select TWO)

  A. RDS backups are managed by AWS
  B. RDS supports any relational database
  C. RDS has no database engine licensing costs
  D. RDS database compute capacity can be easily scaled
  E. RDS inbound traffic control (for example, security groups) is managed by AWS
  A. RDS backups are managed by AWS
  B. RDS supports any relational database

• Question 229:

  A company is launching a critical business application in an AWS Region.

  How can the company increase resilience for this application?

  A. Deploy a copy of the application in another AWS account.
  B. Deploy the application by using multiple VPCs.
  C. Deploy the application by using multiple subnets.
  D. Deploy the application by using multiple Availability Zones.
  D. Deploy the application by using multiple Availability Zones.

• Question 230:

  A user wants to identify any security group that is allowing unrestricted incoming SSH traffic Which AWS service can be used to accomplish this goal?

  A. Amazon Cognito
  B. AWS Shield
  C. Amazon Macie
  D. AWS Trusted Advisor
  D. AWS Trusted Advisor