Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 431:

  Which tool can be used to identity scheduled changes to the AWS infrastructure?

  A. AWS Personal Health Dashboard
  B. AWS Trusted Advisor
  C. Billing Dashboard
  D. AWS Config
  B. AWS Trusted Advisor

• Question 432:

  An Availability Zone consists of: A. one or more data centers in a single location.

  B. two or more data centers in multiple locations.
  C. one or more physical hosts in a single data center.
  D. two or more physical hosts in multiple data centers.
  A

• Question 433:

  Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

  A. AWS Secrets Manager
  B. Amazon Cognito
  C. Amazon Macie
  D. AWS Trusted Advisor
  D. AWS Trusted Advisor

  ---

  Explanation/Reference:

  Reference: https://www.coalfire.com/the-coalfire-blog/march-2019/aws-trusted-advisor-for-security-compliance

• Question 434:

  What can be used to reduce the cost of running Amazon EC2 instances? (Choose two.)

  A. Spot Instances for stateless and flexible workloads
  B. Memory optimized instances for high-compute workloads
  C. On-Demand Instances for high-cost and sustained workloads
  D. Reserved Instances for sustained workloads
  E. Spend limits set using AWS Budgets
  A. Spot Instances for stateless and flexible workloads
  D. Reserved Instances for sustained workloads

• Question 435:

  A company has decided to migrate its production workloads to the AWS Cloud.

  Which actions can help reduce operational costs as part of the migration? (Choose two.)

  A. Reduce overprovisioned instances.
  B. Rehost all third-party licenses on AWS.
  C. Implement a highly available architecture.
  D. Use managed services.
  E. Improve application security.
  B. Rehost all third-party licenses on AWS.
  D. Use managed services.

• Question 436:

  Which of the following are responsibilities of the customer in the AWS Cloud? (Choose two.)

  A. Security in the cloud
  B. Configuration of AWS infrastructure devices
  C. Configuration of security groups on Amazon EC2 instances
  D. Security of the cloud
  E. Patches for the operating system of Amazon DynamoDB
  A. Security in the cloud
  E. Patches for the operating system of Amazon DynamoDB

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 437:

  A company needs to use SQL syntax to perform a direct query of objects in an Amazon S3 bucket. Which AWS service can the company use to meet this requirement?

  A. AWS Glue
  B. Amazon Athena
  C. AWS Lambda
  D. Amazon Kinesis
  A. AWS Glue

• Question 438:

  A company needs to use SQL to query data from Amazon S3.

  Which AWS services or features can the company use to meet this requirement? (Select TWO.)

  A. AWS Data Exchange
  B. Amazon Athena
  C. S3 Select
  D. S3 Transfer Acceleration
  E. AWS Data Pipeline
  B. Amazon Athena
  D. S3 Transfer Acceleration

• Question 439:

  What is the primary use case for Amazon GuardDuty?

  A. Prevention of DDoS attacks
  B. Protection against SQL injection attacks
  C. Automatic monitoring for threats to AWS workloads
  D. Automatic provisioning of AWS resources
  C. Automatic monitoring for threats to AWS workloads

  ---

  Explanation/Reference:

  "Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation."

• Question 440:

  A company wants to use Amazon Elastic Compute Cloud (Amazon EC2) to deploy a global commercial application. The deployment solution should be built with the highest redundancy and fault tolerance. Based on this situation, the Amazon EC2 instances should be deployed:

  A. in a single Availability Zone in one AWS Region
  B. with multiple Elastic Network Interfaces belonging to different subnets
  C. across multiple Availability Zones in one AWS Region
  D. across multiple Availability Zones in two AWS Regions
  D. across multiple Availability Zones in two AWS Regions

  ---

  Explanation/Reference:

  Reference: https://jayendrapatil.com/aws-high-availability-fault-tolerance-architecture-certification/