Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 461:

  Which credential allows programmatic access to AWS resources for use from toe AWS CLI or the AWS API?

  A. User name and password

  B. Access keys

  C. SSH public keys

  D. AWS Key Management Service (AWS KMS) keys

  Correct Answer: B

  B. Access keys allow programmatic access to AWS resources for use from the AWS CLI or the AWS API.

  Access keys are a pair of access key ID and secret access key that are used to securely sign API requests to AWS services. These keys are necessary to authenticate API requests made using AWS SDKs, the AWS Command Line Interface (CLI), or directly using the APIs. The access keys can be created and managed through the AWS Management Console or through the AWS Identity and Access Management (IAM) API.

• Question 462:

  A company wants to create multiple isolated networks in the same AWS account. Which AWS service or component will provide this functionality?

  A. AWS Transit Gateway

  B. Internet gateway

  C. Amazon VPC

  D. Amazon EC2

  Correct Answer: C

  C, Amazon VPC allows a company to create and manage isolated networks within the same AWS account, enabling them to customize their network configuration while providing isolation and security.

• Question 463:

  A company that is planning to migrate to the AWS Cloud is based in an isolated area that has limited internet connectivity. The company needs to perform local data processing on premises. The company needs a solution that can operate without a stab e internet connection.

  Which AWS service will meet these requirements?

  A. Amazon S3

  B. AWS Snowball Edge

  C. AWS Storage Gateway

  D. AWS Backup

  Correct Answer: B

  The AWS service that can meet the requirements of local data processing on premises and operate without a stable internet connection is AWS Snowball Edge. Snowball Edge is a data transfer device with on-board storage and compute power that can be used to perform local processing tasks on data before transferring it to AWS. It is designed to operate in disconnected environments and can be shipped to the AWS region once the data processing is completed.

• Question 464:

  A company is planning to migrate to the AWS Cloud. The company is conducting organizational transformation and wants to become more responsive to customer inquiries and feedback. Which tasks should the company perform to meet these requirements, according to the AWS Cloud Adoption Framework (AWS CAF)? (Choose two.)

  A. Realign teams to focus on products and value streams.

  B. Create new value propositions with new products and services.

  C. Use agile methods to rapidly iterate and evolve.

  D. Use a new data and analytics platform to create actionable insights.

  E. Migrate and modernize legacy infrastructure.

  Correct Answer: AC

  The correct options are A and C.

  A- Realigning teams can help the company become more customer-centric and efficient, which can improve its responsiveness to customer inquiries and feedback. C- Agile methods can help the company rapidly iterate and evolve its

  products and services based on customer feedback, which can improve its responsiveness to customer needs.

• Question 465:

  Which AWS Cloud benefit describes the ability to acquire resources as they are needed and release resources when they are no longer needed?

  A. Economies of scale

  B. Elasticity

  C. Agility

  D. Security

  Correct Answer: B

  B, Elasticity is an AWS Cloud benefit that allows users to acquire resources as needed and release them when no longer required, ensuring efficient resource utilization and cost savings.

• Question 466:

  Which AWS service is always available free of charge to users?

  A. Amazon Athena

  B. AWS Identity and Access Management (IAM)

  C. AWS Secrets Manager

  D. Amazon ElastiCache

  Correct Answer: B

  (B) AWS Identity and Access Management (IAM). IAM is always available free of charge to AWS users and enables you to manage access to AWS services and resources securely. You can use IAM to create and manage AWS users and groups, assign permissions to users and groups to access AWS resources, and configure multi-factor authentication (MFA) for added security.

• Question 467:

  Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

  A. Amazon VPC

  B. AWS Shield

  C. AWS Audit Manager

  D. AWS config

  Correct Answer: B

  The correct answer is B. AWS Shield. AWS Shield is a managed DDoS protection service that safeguards applications that run on AWS against the most common DDoS attacks. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection.

• Question 468:

  Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

  A. Sustainability

  B. Security

  C. Performance efficiency

  D. Reliability

  Correct Answer: B

  The AWS Cloud Adoption Framework (AWS CAF) includes five perspectives that help organizations to organize their efforts when adopting AWS. These perspectives are pillars of a cloud adoption program and represent a set of priorities that organizations must consider when moving to the cloud. The five perspectives are: Business,People,Governance,Platform,Operations. Each of these perspectives includes several key areas and best practices, and together they form a comprehensive framework for organizations to use when planning their cloud adoption. The option that represents a foundational capability of AWS CAF is "Security," which is a key consideration in all aspects of cloud adoption.

• Question 469:

  Which AWS services support a hybrid compute architectural model? (Choose two.)

  A. Amazon Macie

  B. AWS Wavelength

  C. AWS Service Catalog

  D. AWS Outposts

  E. VMware Cloud on AWS

  Correct Answer: DE

  AWS Outposts (Option D) and VMware Cloud on AWS (Option E).

  AWS Outposts allows customers to run AWS services on-premises, providing a hybrid cloud solution. It allows customers to use the same APIs, control plane, and tools they use in the AWS cloud to run applications on-premises, using their own hardware.

  VMware Cloud on AWS provides a hybrid cloud solution that allows customers to run VMware workloads on AWS infrastructure. Customers can use the same VMware tools they use in their on-premises environments to manage workloads running in the AWS cloud.

• Question 470:

  Which AWS services allow users to monitor and retain records of account activities that include governance, compliance, and auditing? (Choose two.)

  A. Amazon CloudWatch

  B. AWS CloudTrail

  C. Amazon GuardDuty

  D. AWS Shield

  E. AWS WAF

  Correct Answer: BC

  B and C AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of AWS account activities. It records account activity and event history in AWS, and delivers this information to customers as log files. Amazon GuardDuty is a threat detection service that continuously monitors AWS accounts for malicious activity and unauthorized behavior, and delivers findings to customers as alerts. It also provides detailed event data that can be used for

  compliance and auditing purposes.