Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 281:

  A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket.

  Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead?

  A. Amazon EC2
  B. AWS Code Deploy
  C. AWS Lambda
  D. Amazon Lightsail
  C. AWS Lambda

• Question 282:

  A company needs to review its AWS Cloud expense history by department. Each department has its own AWS account. Which AWS feature or tool can the company use to meet this requirement?

  A. AWS Budgets
  B. Cost Explorer
  C. AWS Purchase Order Management
  D. AWS Cost Anomaly Detection
  B. Cost Explorer

• Question 283:

  A company wants to enhance security by launching a third-party ISP intrusion detection system from its AWS account. Which AWS service or resource should the company use to meet this requirement?

  A. AWS Security Hub
  B. AWS Marketplace
  C. AWS Quick Starts
  D. AWS Security Center
  D. AWS Security Center

• Question 284:

  Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?

  A. AWS Secrets Manager
  B. AWS CloudHSM
  C. AWS Key Management Service (AWS KMS)
  D. AWS Directory Service
  B. AWS CloudHSM

  ---

  Explanation/Reference:

  The AWS CloudHSM service helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) instances within the AWS cloud. AWS and AWS Marketplace partners offer a variety of solutions for protecting sensitive data within the AWS platform, but for some applications and data subject to contractual or regulatory mandates for managing cryptographic keys, additional protection may be necessary. CloudHSM complements existing data protection solutions and allows you to protect your encryption keys within HSMs that are designed and validated to government standards for secure key management. CloudHSM allows you to securely generate, store, and manage cryptographic keys used for data encryption in a way that keys are accessible only by you.

  Reference: https://aws.amazon.com/cloudhsm/faqs/

• Question 285:

  Which AWS services make use of global edge locations? (Select TWO.)

  A. AWS Fargate
  B. Amazon CloudFront
  C. AWS Global Accelerator
  D. AWS Wavelength
  E. Amazon VPC
  B. Amazon CloudFront
  C. AWS Global Accelerator

  ---

  Explanation/Reference:

  Reference: https://www.lastweekinaws.com/blog/what-is-an-edge-location-in-aws-a-simple-explanation/#:~:text=CloudFront%20is%20the%20most%20commonly,caches%20content%20in%20edge%20locations

• Question 286:

  When a company provisions web servers in multiple AWS Regions, what is being increased?

  A. Coupling
  B. Availability
  C. Security
  D. Durability
  B. Availability

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

• Question 287:

  A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes. Which AWS service or tool should the company use to meet these requirements?

  A. AWS Organizations
  B. Cost Explorer
  C. AWS Budgets
  D. AWS Trusted Advisor
  A. AWS Organizations

• Question 288:

  What is the MINIMUM AWS Support plan that offers a response time of less than 15 times for a business-critical outage?

  A. AWS Developer Support
  B. AWS Enterprise Support
  C. AWS Business Support
  D. AWS Basic Support
  B. AWS Enterprise Support

• Question 289:

  A company has set up a VPC on AWS. The company needs a dedicated connection between the VPC and the company's on-premises network.

  Which action should the company take to meet this requirement?

  A. Establish a VPN connection between the VPC and the company's on-premises network.
  B. Establish an AWS Direct Connect connection between the VPC and the company's on-premises network.
  C. Attach an internet gateway to the VPC. Use the AWS public endpoints for connectivity.
  D. Configure Amazon Connect to provide connectivity between the VPC and the company's on-premises network.
  B. Establish an AWS Direct Connect connection between the VPC and the company's on-premises network.

• Question 290:

  A developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment the application has used 1AM access keys. The application is now ready for deployment onto an ECS cluster.

  How should the application authenticate with AWS services in production?

  A. Configure an ECS task 1AM role for the application to use
  B. Refactor the application to call AWS STS AssumeRole based on an instance role
  C. Configure AWS access key/secret access key environment variables with new credentials
  D. Configure the credentials file with a new access key/secret access key
  A. Configure an ECS task 1AM role for the application to use