Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 401:

  Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

  A. AWS Secrets Manager

  B. Amazon Cognito

  C. Amazon Macie

  D. AWS Trusted Advisor

  Correct Answer: D

  D. AWS Trusted Advisor.

  AWS Trusted Advisor is a service that provides real-time guidance to help provision resources, improve security and performance, and reduce cost in an AWS account. It includes a security category that checks for security vulnerabilities and exposures in an AWS account, such as open security groups and unrestricted access to Amazon S3 buckets. Therefore, it can be used to identify security vulnerabilities of an AWS account.

• Question 402:

  A company wants to migrate its high performance computing (HPC) application to Amazon EC2 instances. The application has multiple components. The application must have fault tolerance and must have the ability to fail over automatically.

  Which AWS infrastructure solution will meet these requirements with the LEAST latency between components?

  A. Multiple AWS Regions

  B. Multiple edge locations

  C. Multiple Availability Zones

  D. Regional edge caches

  Correct Answer: A

• Question 403:

  A company wants to migrate its main application to Amazon EC2. The application must provide low latency to users residing in two different geographic locations. The architecture of the application must have disaster recovery capabilities. How can these requirements be met?

  A. Deploy the application on an EC2 instance and set up EC2 automatic recovery

  B. Deploy the application on multiple EC2 instances running in one Availability Zone

  C. Deploy the application on EC2 instances in Multi-AZs in a single AWS Region

  D. Deploy the application on EC2 instances in multiple AWS Regions.

  Correct Answer: D

  The correct answer is D. Deploy the application on EC2 instances in multiple AWS Regions.

  To meet the requirements of providing low latency to users in two different geographic locations and having disaster recovery capabilities, the application should be deployed on EC2 instances in multiple AWS regions. This architecture provides high availability and disaster recovery capabilities by replicating data and services across multiple regions. If one region becomes unavailable, the application can be quickly switched to another region without disrupting end-users.

• Question 404:

  A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS. Which AWS service should the company use?

  A. Amazon GuardDuty

  B. Amazon Inspector

  C. AWS Shield Advanced

  D. Amazon Macie

  Correct Answer: C

• Question 405:

  A company has an application that stores a high volume of unstructured data and session history. The company needs to scale the application reliably to millions of concurrent users while ensuring consistent low latency. Which AWS service meets these requirements?

  A. Amazon RDS for MariaDB

  B. Amazon DynamoDB

  C. Amazon RDS for SQL Server

  D. Amazon Redshift

  Correct Answer: B

  Answer B: Amazon DynamoDB.

  Option C, Amazon RDS for SQL Server, is a relational database service that may not be the most suitable option for storing unstructured data and session history that require consistent low latency and can scale to millions of concurrent users. Therefore, option B, Amazon DynamoDB, which is a fully managed NoSQL database service that can handle high volumes of unstructured data with low latency and can scale horizontally to meet the demands of millions of concurrent users, is a better option to meet the requirements mentioned in the question

• Question 406:

  Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?

  A. AWS Organizations

  B. AWS Pricing Calculator

  C. AWS Cost Explorer

  D. AWS Service Catalog

  Correct Answer: C

• Question 407:

  A company needs to identify who accessed an AWS service and what action was performed for a given time period. Which AWS service should the company use to meet this requirement?

  A. Amazon CloudWatch

  B. AWS CloudTrail

  C. AWS Security Hub

  D. Amazon Inspector

  Correct Answer: B

• Question 408:

  A company stores data in an Amazon S3 bucket The company must control who has permission to read, write, or delete objects that the company stores in the S3 bucket. Which AWS features will meet these requirements? (Choose two.)

  A. Security groups

  B. Network ACLs

  C. S3 bucket policies

  D. IAM user policies

  E. S3 bucket versioning

  Correct Answer: CD

  Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket.

• Question 409:

  A company is reviewing its operating policies.

  Which policy complies with guidance in the security pillar of the AWS Well-Architected Framework?

  A. Ensure that employees have access to all company data.

  B. Expand employees' permissions as they gain more experience.

  C. Grant all privileges and access to all users.

  D. Apply security requirements at all layers of a process.

  Correct Answer: D

  Applying security requirements at all layers of a process is in compliance with the guidance in the security pillar of the AWS well-architected framework. This includes applying security controls at the network, host, application, and data layers. This approach helps to protect against threats and reduce risk.

• Question 410:

  A new AWS user who has little cloud experience wants to build an application by using AWS services. The user wants to learn how to implement specific AWS services from other customer examples. The user also wants to ask questions to AWS experts.

  Which AWS service or resource will meet these requirements?

  A. AWS Online Tech Talks

  B. AWS documentation

  C. AWS Marketplace

  D. AWS Health Dashboard

  Correct Answer: A

  AWS Online Tech Talks cover a range of topics and expertise levels, and feature technical deep dives, demonstrations, customer examples, and live QandA with AWS experts.