Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 281:

  A company wants to deploy a highly available third-party firewall appliance. Which AWS service or resource will support this task?

  A. AWS WAF

  B. AWS Security Hub

  C. AWS Firewall Manager

  D. Gateway Load Balancer

  Correct Answer: D

  D. Gateway Load Balancer

  1st requirement: Gateway Load Balancer helps you easily deploy, scale, and manage your third-party virtual appliances. 2nd requirement: Improve virtual appliance availability To ensure your virtual appliances are available and healthy,

  Gateway Load Balancer runs health checks on a configurable cadence.

  Ref link: https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner/view/36/

• Question 282:

  Which task is the responsibility of the customer, according to the AWS shared responsibility model?

  A. Patch the Amazon DynamoDB operating system.

  B. Secure Amazon CloudFront edge locations by allowing physical access according to the principle of least privilege.

  C. Protect the hardware that runs AWS services.

  D. Use AWS Identity and Access Management (1AM) according to the principle of least privilege.

  Correct Answer: D

  D. Use AWS Identity and Access Management (IAM) according to the principle of least privilege.

  The AWS shared responsibility model defines the security responsibilities of both the customer and AWS. According to this model, the customer is responsible for:

  D. Use AWS Identity and Access Management (IAM) according to the principle of least privilege: This means that the customer is responsible for managing the identities and access rights of users and applications that access resources on AWS, including Amazon CloudFront. This includes tasks such as creating and managing users, groups, and roles, as well as setting up and enforcing access policies, while following the principle of least privilege. This principle recommends to grant the minimal permissions required to perform the task.

• Question 283:

  Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements?

  A. Amazon Elastic Block Store (Amazon EBS) volume

  B. AWS CloudFormation template

  C. Amazon Elastic Block Store (Amazon EBS) snapshot

  D. Amazon Machine Image (AMI)

  Correct Answer: D

• Question 284:

  Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)

  A. Secure the virtualization layer.

  B. Encrypt data and maintain data integrity.

  C. Patch the Amazon RDS operating system.

  D. Maintain identity and access management controls.

  E. Secure Availability Zones.

  Correct Answer: BD

  D. Maintain identity and access management controls.

  The AWS shared responsibility model defines the security responsibilities of both the customer and AWS. According to this model, the customer is responsible for:

  B. Encrypting data and maintaining data integrity: This means that the customer is responsible for encrypting sensitive data, both at rest and in transit, as well as maintaining data integrity by ensuring that data is not tampered with or modified without authorization.

  D. Maintaining identity and access management controls: This means that the customer is responsible for managing the identities and access rights of users and applications that access resources on AWS. This includes tasks such as creating and managing users, groups, and roles, as well as setting up and enforcing access policies.

• Question 285:

  Which design principles support the reliability pillar of the AWS Well Architected framework? (Choose two.)

  A. Perform operations as code

  B. Enable traceability

  C. Automatically scale to meet demand

  D. Deploy resources globally to improve response time

  E. Automatically recover from failure

  Correct Answer: CE

  C. Automatically scale to meet demand and E. Automatically recover from failure are the two design principles that support the reliability pillar of the AWS Well-Architected Framework.

  The reliability pillar of the AWS Well-Architected Framework focuses on the ability of a system to recover from failures, as well as to prevent failures from occurring. Here are the explanations of the two design principles:

  C. Automatically scale to meet demand: This design principle ensures that the system can handle increases in traffic and demand without being overwhelmed. By automatically scaling resources in response to changes in demand, the system can maintain reliability and performance.

  E. Automatically recover from failure: This design principle ensures that the system can recover quickly and automatically from failures. By automating the recovery process, the system can reduce downtime and maintain availability for users.

• Question 286:

  A company is building an application that will receive millions of database queries each second. The company needs the data store for the application to scale to meet these needs. Which AWS service will meet this requirement?

  A. Amazon DynamoDB

  B. AWS Cloud9

  C. Amazon Elastic ache for Memcached

  D. Amazon Neptune

  Correct Answer: A

• Question 287:

  Which AWS service has unlimited free use?

  A. Amazon SageMaker

  B. AWS config

  C. AWS Organizations

  D. Amazon Cloud Watch

  Correct Answer: C

  AWS Organizations is a feature of your AWS account offered at no additional charge. You are charged only when you access other AWS services from the accounts in your organization. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html

• Question 288:

  A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?

  A. AWS CloudFormation

  B. AWS Directory Service

  C. Amazon Lightsail

  D. AWS CodeDeploy

  Correct Answer: A

• Question 289:

  A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application. To which AWS service could the company migrate the database?

  A. Amazon Athena

  B. Amazon DynamoDB

  C. Amazon RDS

  D. Amazon DocumentDB (with MongoDB compatibility)

  Correct Answer: C

  C. Amazon RDS would be a service the company could use to migrate the Oracle database to AWS, as it allows for the use of existing Oracle databases with minimal changes and provides a managed service for running a variety of database engines, including Oracle.

• Question 290:

  A company wants to protect its AWS Cloud information systems and assets while performing risk assessment and mitigation tasks Which pillar of the AWS Well Architected framework is supported by these goals?

  A. Reliability

  B. Security

  C. Operational excellence

  D. Performance efficiency

  Correct Answer: B

  B. Security is the pillar of the AWS Well-Architected framework that is supported by the goal of protecting a company's AWS Cloud information systems and assets while performing risk assessment and mitigation tasks.