Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 481:

  Which design principle should be considered when architecting in the AWS Cloud?

  A. Think of servers as non-disposable resources
  B. Use synchronous integration of services
  C. Design loosely coupled components
  D. Implement the least permissive rules for security groups
  C. Design loosely coupled components

  ---

  Explanation/Reference:

  Reference: https://www.botmetric.com/blog/aws-cloud-architecture-design-principles/

• Question 482:

  Which AWS service or feature enables users to encrypt data at rest in Amazon S3?

  A. IAM policies
  B. Server-side encryption
  C. Amazon GuardDuty
  D. Client-side encryption
  A. IAM policies

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/protecting-data-at-rest.html

• Question 483:

  A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days. Which AWS service should the company use to accomplish this migration?

  A. Amazon S3 Glacier
  B. AWS Database Migration Service (AWS DMS)
  C. AWS Snowball
  D. AWS Direct Connect
  C. AWS Snowball

  ---

  Explanation/Reference:

  C. snowball

  AWS Snowball is a petabyte-scale data transport service that uses secure devices to transfer large amounts of data into and out of the AWS Cloud.

  Amazon S3 Glacier (S3 Glacier) is a secure and durable service for low-cost data archiving and long-term backup.

  With S3 Glacier, you can store your data cost effectively for months, years, or even decades. S3 Glacier helps you offload the administrative burdens of operating and scaling storage to AWS, so you don't have to worry about capacity planning, hardware provisioning, data replication, hardware failure detection and recovery, or time-consuming hardware migration

  AWS Database Migration Service (AWS DMS) is a cloud service that makes it easy to migrate relational databases, data warehouses, NoSQL databases, and other types of data stores. You can use AWS DMS to migrate your data into the AWS Cloud or between combinations of cloud and on-premises setups.

• Question 484:

  Which of the following are benefits of running a database on amazon rds compared to an on premises database?

  A. RDS backup are managed by AWS
  B. RDS supports any relational database
  C. RDs has no database engineer licensing costs.
  D. RDS database compute capacity can be easily scaled.
  E. RDS inbound traffic content (for example, security groups) is managed by AWS.
  A. RDS backup are managed by AWS
  C. RDs has no database engineer licensing costs.

• Question 485:

  A developer has an AWS account and needs access to another account's test database. Which AWS service or feature can the developer use to gain access to the test database?

  A. Amazon Macie
  B. Security groups
  C. IAM roles
  D. AWS Trusted Advisor
  C. IAM roles

• Question 486:

  A company needs stateless network filtering for its VPC. Which AWS service, tool, or feature will meet this requirement?

  A. AWS PrivateLink
  B. Security group
  C. Network access control list (ACL)
  D. AWS WAF
  C. Network access control list (ACL)

• Question 487:

  A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network. Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?

  A. Network ACl
  B. Security groups
  C. AWS WAF
  D. Amazon GuardDuty
  B. Security groups

  ---

  Explanation/Reference:

  AWS WAF is a web application firewall that lets you monitor the HTTP(S) requests that are forwarded to your protected web application resources. You can protect the following resource types: Amazon CloudFront distribution Amazon API Gateway REST API Application Load Balancer

  AWS AppSync GraphQL API Amazon Cognito user pool

• Question 488:

  A company needs general architectural guidance about how to use AWS services for various use cases, workloads, and applications. What is the LEAST expensive AWS Support plan that provides this guidance?

  A. AWS Business Support
  B. AWS Developer Support
  C. AWS Enterprise Support
  D. AWS Basic Support
  A. AWS Business Support

• Question 489:

  Which actions allow a company's security team to improve the security procedures for employees accessing AWS resources? (Select TWO )

  A. Create IAM users for groups of employees to share
  B. Create IAM policies based on least privilege principles
  C. Create IAM users in different Availability Zones
  D. Enable multi-factor authentication for privileged users
  E. Specify an individual IAM user for each Amazon EC2 instance
  B. Create IAM policies based on least privilege principles
  D. Enable multi-factor authentication for privileged users

• Question 490:

  How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?

  A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required.
  B. Companies can expand into new geographic regions.
  C. Companies can access a range of technologies to experiment and innovate quickly.
  D. Companies can pay for IT resources only when they use the resources.
  C. Companies can access a range of technologies to experiment and innovate quickly.