Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 311:

  Distributing workloads across multiple Availability Zones supports which cloud architecture design principle?

  A. Implement automation.
  B. Design for agility.
  C. Design for failure.
  D. Implement elasticity.
  C. Design for failure.

• Question 312:

  Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

  A. Amazon VPC
  B. AWS Shield
  C. AWS Audit Manager
  D. AWS config
  B. AWS Shield

  ---

  Explanation/Reference:

  The correct answer is B. AWS Shield. AWS Shield is a managed DDoS protection service that safeguards applications that run on AWS against the most common DDoS attacks. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection.

• Question 313:

  In which of the following is Amazon CloudFront content cached?

  A. Availability Zones
  B. Local Zones
  C. AWS Regions
  D. Edge locations
  D. Edge locations

• Question 314:

  A company needs to store code in a version control system. The company also needs to continually deploy updated code through a series of automated steps (build test package and deploy). Which combination of AWS services will meet these requirements? (Select TWO.)

  A. AWS CloudFormation
  B. AWS CodeCommit
  C. AWS Control Tower
  D. AWS Elastic Beanstalk
  E. AWS CodePipeline
  B. AWS CodeCommit
  E. AWS CodePipeline

• Question 315:

  Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic regions connected by a network with low latency high throughput, and redundancy?

  A. Economies of scale
  B. Security
  C. Elasticity
  D. Global reach
  D. Global reach

  ---

  Explanation/Reference:

  The AWS Global Cloud Infrastructure is the most secure, extensive, and reliable cloud platform, offering over 200 fully featured services from data centers globally. Whether you need to deploy your application workloads across the globe in a single click, or you want to build and deploy specific applications closer to your end-users with single- digit millisecond latency, AWS provides you the cloud infrastructure where and when you need it.

• Question 316:

  Which load balancer types are available with Elastic Load Balancing (ELB)? (Choose two.)

  A. Public load balancers with AWS Application Auto Scaling capabilities
  B. F5 Big-IP and Citrix NetScaler load balancers
  C. Classic Load Balancers
  D. Cross-zone load balancers with public and private IPs
  E. Application Load Balancers
  C. Classic Load Balancers
  E. Application Load Balancers

  ---

  Explanation/Reference:

  Elastic Load Balancing supports the following types of load balancers: Application Load Balancers, Network Load Balancers, and Classic Load Balancers. Amazon ECS services can use either type of load balancer. Application Load Balancers are used to route HTTP/HTTPS (or Layer 7) traffic. Network Load Balancers and Classic Load Balancers are used to route TCP (or Layer 4) traffic.

  Reference: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html

• Question 317:

  Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements?

  A. Amazon Elastic Block Store (Amazon EBS) volume
  B. AWS CloudFormation template
  C. Amazon Elastic Block Store (Amazon EBS) snapshot
  D. Amazon Machine Image (AMI)
  D. Amazon Machine Image (AMI)

• Question 318:

  Which of the following is an example of how moving to the AWS Cloud reduces upfront cost?

  A. By replacing large variable costs with lower capital investments
  B. By replacing large capital investments with lower variable costs
  C. By allowing the provisioning of compute and storage at a fixed level to meet peak demand
  D. By replacing the repeated scaling of virtual servers with a simpler fixed-scale model
  B. By replacing large capital investments with lower variable costs

• Question 319:

  Which of the following security measures protect access to an AWS account? (Choose two.)

  A. Enable AWS CloudTrail.
  B. Grant least privilege access to IAM users.
  C. Create one IAM user and share with many developers and users.
  D. Enable Amazon CloudFront.
  E. Activate multi-factor authentication (MFA) for privileged users.
  B. Grant least privilege access to IAM users.
  E. Activate multi-factor authentication (MFA) for privileged users.

  ---

  Explanation/Reference:

  If you decided to create service accounts (that is, accounts used for programmatic access by applications running outside of the AWS environment) and generate access keys for them, you should create a dedicated service account for each use case. This will allow you to restrict the associated policy to only the permissions needed for the particular use case, limiting the blast radius if the credentials are compromised. For example, if a monitoring tool and a release management tool both require access to your AWS environment, create two separate service accounts with two separate policies that define the minimum set of permissions for each tool.

  Reference: https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using-programmatic-access/

• Question 320:

  Which AWS Cloud benefit describes the ability to acquire resources as they are needed and release resources when they are no longer needed?

  A. Economies of scale
  B. Elasticity
  C. Agility
  D. Security
  B. Elasticity

  ---

  Explanation/Reference:

  B, Elasticity is an AWS Cloud benefit that allows users to acquire resources as needed and release them when no longer required, ensuring efficient resource utilization and cost savings.