Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability B. Security C. Performance efficiency D. Reliability
B. Security
Explanation/Reference:
The AWS Cloud Adoption Framework (AWS CAF) includes five perspectives that help organizations to organize their efforts when adopting AWS. These perspectives are pillars of a cloud adoption program and represent a set of priorities that organizations must consider when moving to the cloud. The five perspectives are: Business,People,Governance,Platform,Operations. Each of these perspectives includes several key areas and best practices, and together they form a comprehensive framework for organizations to use when planning their cloud adoption. The option that represents a foundational capability of AWS CAF is "Security," which is a key consideration in all aspects of cloud adoption.
Question 233:
As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?
A. Security management of data center B. Patch management C. Configuration management D. User and access management
Which tasks can be performed by an IAM user that has been granted all of the AWS Identity and Access Management (IAM) permissions that are available? (Choose two.)
A. Activate IAM access to the AWS Billing and Cost Management console. B. Close an AWS account. C. Turn on multi-factor authentication (MFA) for non-administrative IAM users. D. Change the AWS Support plan. E. Delegate access to another AWS account.
C. Turn on multi-factor authentication (MFA) for non-administrative IAM users. E. Delegate access to another AWS account.
Question 235:
A company wants to continuously monitor its AWS accounts and workloads for malicious activity. The company also wants to receive detailed security findings for visibility and remediation. Which AWS service should the company use to meet these requirements?
A. Amazon GuardDuty B. AWS Shield C. AWS WAP D. AWS CloudTrail
A. Amazon GuardDuty
Explanation/Reference:
Secret here is the "workloads for malicious activities" if it was just users it would be CloudTrail which keeps track of AWS Admin activities. Since is workloads and users leveraging ML to guard the account.
Question 236:
A company has multiple departments. Each department uses its own AWS account.
Which AWS service or tool can the company use to combine the billing for all accounts into one bill?
A. Amazon Forecast B. AWS Budgets C. AWS Organizations D. AWS Marketplace
An online retail company has seasonal sales spikes several times a year, primarily around holidays Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season. Which advantages of moving to the AWS Cloud would MOST benefit the company? (Select TWO )
A. Global footprint B. Elasticity C. AWS service quotas D. AWS shared responsibility model E. Pay-as-you-go pricing
B. Elasticity E. Pay-as-you-go pricing
Explanation/Reference:
The advantages of moving to the AWS Cloud that would MOST benefit the company in this scenario are:
B. Elasticity: The company can take advantage of the elasticity of the AWS Cloud to easily scale its infrastructure up or down as demand fluctuates during the seasonal sales spikes. This can help avoid overprovisioning during low demand periods, which can result in unnecessary costs.
E. Pay-as-you-go pricing: The company can benefit from the pay-as-you-go pricing model of the AWS Cloud, which allows it to only pay for the resources it uses. This can help reduce costs during low demand periods and avoid the need to make large upfront investments in infrastructure that may not be fully utilized.
Question 238:
Which AWS service can be used to generate alerts based on an estimated monthly bill?
A. AWS Config B. Amazon CloudWatch C. AWS X-Ray D. AWS CloudTrail
B. Amazon CloudWatch
Explanation/Reference:
You can monitor your estimated AWS charges by using Amazon CloudWatch. When you enable the monitoring of estimated charges for your AWS account, the estimated charges are calculated and sent several times daily to CloudWatch as
metric data.
Billing metric data is stored in the US East (N. Virginia) Region and represents worldwide charges. This data includes the estimated charges for every service in AWS that you use, in addition to the estimated overall total of your AWS charges.
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
A. How quickly an Amazon EC2 instance can be restarted B. The ability to rightsize resources as demand shifts C. The maximum amount of RAM an Amazon EC2 instance can use D. The pay-as-you-go billing model E. How easily resources can be produced when they are needed
B. The ability to rightsize resources as demand shifts E. How easily resources can be produced when they are needed
Explanation/Reference:
The AWS Well-Architected Framework defines elasticity as: The ability to acquire resources as you need them and release resources when you no longer need them. In the cloud, you want to do this automatically https://dev.to/aws-builders/ what-does-elastic-mean-cloud-concepts-explained-4anb#:~:text=The%20AWS%20Well%2DArchitected%20Framework%20defines%20elasticity%20as%3A,want%20to%20do%20this%20automatically.
A company needs to request temporary, limited-privilege credentials for IAM users and for the federated users that the company authenticates.
Which AWS service will provide these credentials?
A. Amazon GuardDuty B. AWS Key Management Service (AWS KMS) C. AWS Security Token Service (AWS STS) D. AWS Identity and Access Management Access Analyzer
D. AWS Identity and Access Management Access Analyzer
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Amazon exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your CLF-C01 exam preparations
and Amazon certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.