Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 371:

  A company runs an application in the AWS Cloud. The levels of traffic to the application vary throughout the week. The company wants to increase the reliability of its application at all times, even during times of high traffic. Which combination of steps will meet this requirement? (Choose two.)

  A. Test recovery procedures.

  B. Purchase instances weekly based on the previous week's high traffic points.

  C. Handle software failures automatically.

  D. Scale the application vertically.

  E. Make all changes in the environment manually.

  Correct Answer: AC

  A. Test recovery procedures: Testing recovery procedures will help identify potential issues and ensure that the application can recover quickly in the event of a failure. This will help reduce downtime and increase the reliability of the application.

  C. Handle software failures automatically: Automating the handling of software failures, such as through the use of automated recovery processes or load balancers, can help ensure that the application continues to run smoothly even during times of high traffic. This can also help reduce the risk of human error, leading to increased reliability.

• Question 372:

  A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes. Which solution will meet these requirements?

  A. Create a read replica of the DB instance.

  B. Create a template of the DB instance by using AWS CloudFormation.

  C. Take frequent snapshots of the DB instance. Store the snapshots in Amazon S3.

  D. Modify the DB instance to be a Multi-AZ deployment.

  Correct Answer: D

  D is correct , key here is High availability , multiple AZ's for high availability

• Question 373:

  A company has identified a high-risk network security issue during an AWS Well-Architected review. The company needs a managed solution that the company can use to deploy essential network protections for all of its VPCs. Which AWS service or feature meets these requirements?

  A. Security groups

  B. Network ACLs

  C. AWS Network Firewall

  D. Amazon VPC Network Access Analyzer

  Correct Answer: C

  AWS Network Firewall is a managed firewall service that provides network traffic filtering and intrusion detection and prevention capabilities for VPCs. It offers customizable rules that can be applied to traffic at the stateful and stateless levels, allowing you to define granular security policies for your network traffic. With Network Firewall, you can centrally manage your network security policies across multiple VPCs and scale your protection as your traffic grows.

• Question 374:

  In which of the following AWS services should database credentials be stored for maximum security?

  A. AWS Identity and Access Management (IAM)

  B. AWS Secrets Manager

  C. Amazon S3

  D. AWS Key Management Service (AWS KMS)

  Correct Answer: B

  AWS Secrets Manager is a fully managed service that helps you protect access to applications, services, and IT resources. It enables you to store and manage credentials, secrets, and other sensitive information such as database passwords, API keys, and SSH keys. You can also rotate secrets automatically and use fine-grained access control to ensure that only authorized users and applications can access them. AWS Key Management Service (AWS KMS) is a managed service that makes it easy to create and control the encryption keys used to encrypt your data. While AWS KMS can be used to protect sensitive data, it is not specifically designed to store and manage database credentials.

• Question 375:

  A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code. Which AWS service meets these requirements?

  A. AWS Lambda

  B. Amazon Simple Queue Service (Amazon SQS)

  C. Amazon CloudWatch

  D. Amazon EventBridge

  Correct Answer: D

  Based on the given requirements, the AWS service that would best meet the company's needs is Amazon EventBridge (Option D).

  Amazon EventBridge is a serverless event bus that makes it easy to connect applications together using data from various sources. It simplifies the task of building event-driven architectures by enabling different services to communicate with each other without requiring any additional code.

• Question 376:

  A company website is experiencing DDoS attacks.

  Which AWS service can help protect the company website against these attacks?

  A. AWS Resource Access Manager

  B. AWS Amplify

  C. AWS Shield

  D. Amazon GuardDuty

  Correct Answer: C

  C. AWS Shield- for the prevention of DDOS attacks

• Question 377:

  A company must compare the cost of running a MySQL database on an Amazon EC2 instance and Amazon RDS DB instance. Which AWS service or tool should the company use?

  A. AWS Budgets

  B. AWS Control Tower

  C. AWS Outposts

  D. AWS Pricing Calculator

  Correct Answer: D

  The AWS Pricing Calculator is a tool that allows users to estimate the cost of using AWS services, including EC2 instances and RDS DB instances. With this tool, the company can compare the cost of running a MySQL database on an Amazon EC2 instance and an Amazon RDS DB instance, and make an informed decision about which option is more cost-effective.

• Question 378:

  A company needs to use standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake. Which AWS service meets these requirements?

  A. Amazon DynamoDB

  B. Amazon Aurora

  C. Amazon Athena

  D. Amazon Redshift

  Correct Answer: C

  Amazon Athena is an interactive query service that enables you to analyze data in Amazon S3 using standard SQL. Athena is serverless, which means there are no infrastructure to manage or scale, and it can handle exabytes of data. Athena supports various data formats such as CSV, JSON, ORC, Avro, and Parquet. You can easily combine and query data from different sources in Amazon S3 using Athena.

• Question 379:

  A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating systems that host its applications. Which AWS service should the company use to meet these requirements?

  A. Amazon DynamoDB

  B. Amazon EC2

  C. AWS Lambda

  D. Amazon RDS

  Correct Answer: B

  If the customer wants access to the underlying Guest OS and maintain full patching for it as well. EC2 is the only option at which they can do so.

• Question 380:

  A company needs to store source code. The source code must be accessible over the internet. Which AWS service should the company use to meet these requirements?

  A. AWS CodeDeploy

  B. AWS CodeStar

  C. AWS CodeCommit

  D. Amazon CodeGuru

  Correct Answer: C

  A. AWS CodeDeploy- automates deployments of code

  B. AWS CodeStar- project management based of code building process C. AWS CodeCommit- git repo of source code.

  D. Amazon CodeGuru- helps improve code for better efficiency