Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 441:

  A web application running on AWS has been spammed with malicious requests from a recurring set of IP addresses. Which AWS service can help secure the application and block the malicious traffic?

  A. AWS IAM
  B. Amazon GuardDuty
  C. Amazon Simple Notification Service (Amazon SNS)
  D. AWS WAF
  D. AWS WAF

  ---

  Explanation/Reference:

  AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. You can use AWS WAF to define customizable web security rules that control which traffic accesses your web applications. If you use AWS Shield Advanced, you can use AWS WAF at no extra cost for those protected resources and can engage the DRT to create WAF rules.

  Reference: https://aws.amazon.com/answers/networking/aws-ddos-attack-mitigation/

• Question 442:

  A company is migrating an application that is running non-interruptible workloads for a three-year time frame.

  Which pricing construct would provide the MOST cost-effective solution?

  A. Amazon EC2 Spot Instances
  B. Amazon EC2 Dedicated Instances
  C. Amazon EC2 On-Demand Instances
  D. Amazon EC2 Reserved Instances
  D. Amazon EC2 Reserved Instances

• Question 443:

  Which AWS support plan includes a dedicated Technical Account Manager?

  A. Developer
  B. Enterprise
  C. Business
  D. Basic
  B. Enterprise

  ---

  Explanation/Reference:

  The enterprise support plans supports technical account manager. Developer and business support plans are devoid of this facility. Reference: https://aws.amazon.com/premiumsupport/plans/

• Question 444:

  A global company's customers are experiencing long load times for images that are stored in an Amazon S3 bucket on the company's website.

  Which AWS service will improve the load times for the customers?

  A. AWS Marketplace
  B. Amazon CloudFront
  C. Amazon Route 53
  D. AWS Direct Connect
  B. Amazon CloudFront

• Question 445:

  Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

  A. Amazon CloudFront
  B. Amazon GuardDuty
  C. Amazon Route 53
  D. AWS Trusted Advisor
  C. Amazon Route 53

  ---

  Explanation/Reference:

  Amazon Route 53 with DNS Failover, Amazon Route 53 can help detect an outage of your website and redirect your end users to alternate locations where your application is operating properly. Reference: https://aws.amazon.com/about-aws/whats-new/2013/02/11/announcing-dns-failover-for-route-53/

• Question 446:

  A company uses Amazon WorkSpaces.

  Which task is the responsibility of AWS, according to the AWS shared responsibility model?

  A. Set up multi-factor authentication (MFA) for each WorkSpaces user account.
  B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.
  C. Provide security for WorkSpaces user accounts through AWS Identity and Access Management (IAM).
  D. configure AWS CloudTrail to log API calls and user activity.
  B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.

• Question 447:

  A company wants to set up a high-speed connection between its data center and its applications that run on AWS. The company must not transfer data over the internet. Which action should the company take to meet these requirements?

  A. Transfer data to AWS by using AWS Snowball.
  B. Transfer data to AWS by using AWS Storage Gateway.
  C. Set up a VPN connection between the data center and an AWS Region.
  D. Set up an AWS Direct Connect connection between the company network and AWS.
  D. Set up an AWS Direct Connect connection between the company network and AWS.

  ---

  Explanation/Reference:

  To meet the requirement of setting up a high-speed connection between a company's data center and its applications running on AWS without transferring data over the internet, the company should set up an AWS Direct Connect connection between the company network and AWS. Therefore, the correct option is D.

• Question 448:

  In the AWS shared responsibility model, which tasks are the responsibility of AWS? (Choose two.)

  A. Patch an Amazon EC2 instance operating system.
  B. configure a security group.
  C. Monitor the health of an Availability Zone.
  D. Protect the infrastructure that runs Amazon EC2 instances.
  E. Manage access to the data in an Amazon S3 bucket.
  C. Monitor the health of an Availability Zone.
  D. Protect the infrastructure that runs Amazon EC2 instances.

  ---

  Explanation/Reference:

  In the AWS shared responsibility model, AWS is responsible for:

  C. Monitor the health of an Availability Zone: AWS is responsible for ensuring the availability and reliability of their infrastructure.

  D. Protect the infrastructure that runs Amazon EC2 instances: AWS is responsible for protecting the underlying infrastructure that runs EC2 instances. Therefore, options C and D are correct

• Question 449:

  What does AWS Shield Standard provide?

  A. WAF rules
  B. DDoS protection
  C. Identity and Access Management (IAM) permissions and access to resources
  D. Data encryption
  B. DDoS protection

  ---

  Explanation/Reference:

  AWS Shield Standard provides protection for all AWS customers from common, most frequently occurring network and transport layer DDoS attacks that target your web site or application at no additional charge. Reference: https://aws.amazon.com/shield/pricing/

• Question 450:

  A company is based in a location without an AWS Region but wants to move some of its Windows file servers to AWS. The data must reside in the location that the company is based in.

  Which AWS service will meet these requirements?

  A. AWS Outposts
  B. AWS Local Zones
  C. Amazon EC2
  D. Amazon FSx for Windows File Server
  D. Amazon FSx for Windows File Server