Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 341:

  Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?

  A. Customer

  B. AWS

  C. Account creator

  D. Auditing team

  Correct Answer: B

  https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 342:

  A large company wants to track the combined AWS usage costs of all of its linked accounts. How can this be accomplished?

  A. Use AWS Trusted Advisor to generate customized summary reports.

  B. Use AWS Organizations to generate consolidated billing reports.

  C. Use AWS Budgets to set utilization targets and receive summary reports.

  D. Use the AWS Control Tower dashboard to get a summary report of all inked account costs.

  Correct Answer: B

  Key Word: Linked Accounts AKA Organizations

• Question 343:

  A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned. Which AWS service or feature can be used to estimate costs before deployment?

  A. AWS Free Tier

  B. AWS Pricing Calculator

  C. AWS Billing and Cost Management

  D. AWS Cost and Usage Report

  Correct Answer: B

• Question 344:

  A company is designing workloads in the AWS Cloud. The company wants the workloads to perform their intended function correctly and consistently throughout their lifecycle. Which pillar of the AWS Well-Architected Framework does this goal represent?

  A. Operational excellence

  B. Security

  C. Reliability

  D. Performance efficiency

  Correct Answer: C

  Reliability pillar ?The reliability pillar encompasses the ability of a workload to perform its intended function correctly and consistently when expected. This includes operating and testing the workload through its total lifecycle.

• Question 345:

  Which AWS network services or features allow CIDR block notation when providing an IP address range? (Choose two.)

  A. Security groups

  B. Amazon Machine Image (AMI)

  C. Network access control list (network ACL)

  D. AWS Budgets

  E. Amazon Elastic Block Store (Amazon EBS)

  Correct Answer: AC

  The AWS network services or features that allow CIDR block notation when providing an IP address range are:

  A. Security groups

  C. Network access control list (network ACL)

• Question 346:

  A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs. Which AWS service or feature should the company use to meet these authentication requirements?

  A. Amazon API Gateway

  B. IAM users

  C. AWS Security Token Service (AWS STS)

  D. IAM instance profiles

  Correct Answer: C

• Question 347:

  Which AWS service or feature offers HTTP attack protection to users running public-facing web applications?

  A. Security groups

  B. Network ACLs

  C. AWS WAF

  D. AWS Shield Standard

  Correct Answer: C

  C. AWS WAF

  A WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help

  determine what traffic is malicious and what traffic is safe.

  https://www.f5.com/glossary/web-application-firewall-waf#:~:text=A%20WAF%20protects%20your% 20web,and%20what%20traffic%20is%20safe.

• Question 348:

  Which AWS design principle emphasizes the reduction of interdependencies between components of an application?

  A. Scalability

  B. Loose coupling

  C. Automation

  D. Caching

  Correct Answer: B

• Question 349:

  Which AWS service gives users the ability to combine existing accounts into a centrally managed hierarchy?

  A. AWS Organizations

  B. AWS Identity and Access Management (IAM)

  C. AWS config

  D. Amazon Inspector

  Correct Answer: A

• Question 350:

  Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

  A. AWS Support

  B. AWS customers

  C. AWS Key Management Service (AWS KMS)

  D. AWS Trusted Advisor

  Correct Answer: B

  B. AWS Customers.

  -- Newly created Amazon EBS volumes aren't encrypted by default.-- You, as an AWS Customer, can turn on default encryption for new EBS volumes. >> https://aws.amazon.com/premiumsupport/knowledge-center/ebs-automatic-encryption/

  #:~:text=Short% 20description,Cloud%20(Amazon%20EC2)%20console.