Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 381:

  Which option is AWS responsible for under the AWS shared responsibility model?

  A. Network and firewall configuration
  B. Client-side data encryption
  C. Management of user permissions
  D. Hardware and infrastructure
  D. Hardware and infrastructure

• Question 382:

  Which AWS services or resources can a company use directly on its on-premises servers? (Select TWO.)

  A. AWSOpsWorks
  B. AWS CloudFormation
  C. AWS Storage Gateway
  D. Application Load Balancer
  E. Amazon Cognito
  A. AWSOpsWorks
  C. AWS Storage Gateway

• Question 383:

  A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.

  Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

  A. EC2 hypervisor
  B. Security patching of the guest operating system
  C. Network connectivity of the host server
  D. Uptime service level agreement (SLA) for the EC2 instances
  B. Security patching of the guest operating system

• Question 384:

  What is a benefit of consolidated billing for AWS accounts?

  A. Access to AWS Personal Health Dashboard
  B. Combined usage volume discounts
  C. Improved account security
  D. Centralized AWS IAM
  B. Combined usage volume discounts

  ---

  Explanation/Reference:

  Reference: https://jayendrapatil.com/aws-consolidated-billing/

• Question 385:

  What is the LEAST expensive AWS Support plan that provides the full set of AWS Trusted Advisor best practice checks for cost optimization?

  A. AWS Enterprise Support
  B. AWS Business Support
  C. AWS Developer Support
  D. AWS Basic Support
  B. AWS Business Support

• Question 386:

  Which of the following are ways to improve security on AWS? (Choose two.)

  A. Using AWS Artifact
  B. Granting the broadest permissions to all IAM roles
  C. Running application code with AWS Cloud9
  D. Enabling multi-factor authentication (MFA) with Amazon Cognito
  E. Using AWS Trusted Advisor security checks
  D. Enabling multi-factor authentication (MFA) with Amazon Cognito
  E. Using AWS Trusted Advisor security checks

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/security/top-10-security-items-to-improve-in-your-aws-account/

• Question 387:

  A company recently created its first AWS account.

  Which AWS services will require the use of a VPC? (Select TWO.)

  A. Amazon S3
  B. Amazon Elastic File System (Amazon EFS)
  C. Amazon Cognito
  D. Amazon DynamoDB
  E. Amazon EC2
  B. Amazon Elastic File System (Amazon EFS)
  E. Amazon EC2

• Question 388:

  A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software. Which AWS service should the company use to meet these requirements?

  A. Amazon VPC
  B. Amazon EC2
  C. Amazon GuardDuty
  D. AWS Direct Connect
  C. Amazon GuardDuty

  ---

  Explanation/Reference:

  from: https://aws.amazon.com/guardduty/

  1.

  Continuously monitor your AWS accounts, instances, container workloads, users, and storage for potential threats.

  2.

  Expose threats quickly using anomaly detection, machine learning, behavioral modeling, and threat intelligence feeds from AWS and leading third-parties.

  3.

  Mitigate threats early by initiating automated responses.

• Question 389:

  A company wants to archive its media data as soon as the data is generated. The company needs to store the data for several years Two or three times each year the company must access some of the data within 10 minutes of a request.

  Which Amazon S3 solution will meet these requirements MOST cost-effectively?

  A. S3 Standard
  B. S3 Glacier with expedited retrievals
  C. S3 Intelligent-Tiering
  D. S3 Glacier Deep Archive
  B. S3 Glacier with expedited retrievals

• Question 390:

  According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

  A. Hard code an 1AM user's secret key and access key directly in the application, and upload the file.
  B. Store the 1AM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the tile.
  C. Have the EC2 instance assume a role to obtain the privileges to upload the file.
  D. Modify the S3 bucket policy so that any service can upload to it at any time
  C. Have the EC2 instance assume a role to obtain the privileges to upload the file.