Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 41:

  A company uses AWS Direct Conned and wants to establish connectivity that spans VPCs across multiple AWS Regions. Which AWS service or feature should the company use to meet these requirements?

  A. AWS Transit Gateway

  B. AWS PrivateLink

  C. Amazon Connect

  D. Amazon Route 53

  Correct Answer: B

• Question 42:

  A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goal? (Choose two.)

  A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated.

  B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC.

  C. Use Amazon Athena to query data from the on-premises database servers.

  D. Connect the company's on-premises data center to AWS using AWS Direct Connect.

  E. Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers.

  Correct Answer: BD

  Reference: https://aws.amazon.com/blogs/apn/amazon-vpc-for-on-premises-network-engineers-part-one/

• Question 43:

  A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally

  overwritten or deleted.

  Which S3 feature should the company turn on to meet this requirement?

  A. Server access logging

  B. S3 Versioning

  C. S3 Lifecycle rules

  D. Encryption in transit and at rest

  Correct Answer: B

  Versioning-enabled buckets can help you recover objects from accidental deletion or overwrite. For example, if you delete an object, Amazon S3 inserts a delete marker instead of removing the object permanently. The delete marker becomes the current object version. If you overwrite an object, it results in a new object version in the bucket. You can always restore the previous version.

  Exam K

• Question 44:

  A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles. Which AWS service can be used to meet this requirement?

  A. AWS Systems Manager

  B. AWS CloudFormation

  C. AWS CodeCommit

  D. AWS config

  Correct Answer: B

  Infrastructure as code is the process of provisioning and managing your cloud resources by writing a template file that is both human readable, and machine consumable. For AWS cloud development the built-in choice for infrastructure as code is AWS CloudFormation.

• Question 45:

  A company needs to monitor and forecast AWS costs and usage. The company also must set event-driven alert notifications that occur if spending limits are exceeded. Which AWS service or tool should the company use to meet these requirements?

  A. AWS Budgets

  B. Amazon CloudWatch

  C. AWS Config

  D. AWS Service Catalog

  Correct Answer: A

  Reference: https://aws.amazon.com/aws-cost-management/aws-budgets/

• Question 46:

  Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)

  A. Physical and environmental controls

  B. Patch management

  C. Cloud awareness and training

  D. Zone security

  E. Application data encryption

  Correct Answer: BC

  B and C according to aws:

  Shared Controls ?Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must

  provide their own control implementation within their use of AWS services. Examples include:

  Patch Management ?AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management ?AWS maintains the configuration of its

  infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness and Training- AWS trains AWS employees, but a customer must train their own employees.

• Question 47:

  A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs. Which AWS service or feature meets these requirements?

  A. AWS Direct Connect

  B. AWS Transit Gateway

  C. AWS Site-to-Site VPN

  D. VPC endpoints

  Correct Answer: B

  Answer is B. Keyword here is "centrally". Transit gateway acts as a central hub to connect VPCs.

• Question 48:

  Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data?

  A. Amazon Athena

  B. Amazon QuickSight

  C. Amazon CloudWatch

  D. AWS Organizations

  Correct Answer: B

  Quicksight for sure. Check the link below. In addition I did a lab last week doing exactly what this scenario talks about. https://aws.amazon.com/premiumsupport/knowledge-center/quicksight-cost-usage-report/

• Question 49:

  A company is preparing to launching a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan. Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?

  A. AWS Abuse team

  B. The designated AWS technical account manager (TAM)

  C. AWS infrastructure event management

  D. AWS Professional Services

  Correct Answer: C

  AWS Infrastructure Event Management (IEM) offers architecture and scaling guidance and operational support during the preparation and execution of planned events, such as shopping holidays, product launches, and migrations. For these events, AWS Infrastructure Event Management will help you assess operational readiness, identify and mitigate risks, and execute your event confidently with AWS experts by your side. The program is included in the Enterprise Support plan and is available to Business Support customers for an additional fee.

• Question 50:

  A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.

  Which pillar of the AWS Well-Architected Framework aligns with these requirements?

  A. Operational excellence

  B. Security

  C. Reliability

  D. Cost optimization

  Correct Answer: D