Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 511:

  Which action will help increase security in the AWS Cloud?

  A. Enable programmatic access for all IAM users.

  B. Use IAM users instead of IAM roles to delegate permissions.

  C. Rotate access keys on a reoccurring basis.

  D. Use inline policies instead of customer managed policies.

  Correct Answer: C

  Explanation: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html Where possible, we recommend relying on temporary credentials instead of creating long- term credentials such as access keys. However, for scenarios in which you need IAM users with programmatic access and long-term credentials, we recommend that you rotate access keys. Regularly rotating long-term credentials helps you familiarize yourself with the process. This is useful in case you are ever in a situation where you must rotate credentials, such as when an employee leaves your company. We recommend that you use IAM access last used information to rotate and remove access keys safely.

• Question 512:

  Which AWS service should a company use to check for 1AM access keys that have not been rotated recently?

  A. AWS WAF

  B. AWS Trusted Advisor

  C. Amazon Inspector

  D. AWS Certificate Manager (ACM)

  Correct Answer: B

  Explanation: Service quotas are the maximum number of resources that you can create in an AWS account. AWS implements quotas to provide highly available and reliable service to all customers, and protects you from unintentional spend. Trusted Advisor will notify you once you reach more than 80% of a service quota. You can then follow recommendations to delete resources or request a quota increase.

• Question 513:

  A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with distributed denial of service (DDoS) attacks.

  Which AWS service will meet these requirements?

  A. AWS WAF

  B. AWS Shield Standard

  C. Amazon Macie

  D. AWS Shield Advanced

  Correct Answer: D

  Explanation: https://aws.amazon.com/shield/faqs/

• Question 514:

  A company needs to low-code, visual workflow service that developers can use to build distributed applications.

  Which AWS service is designated to meet these requirements?

  A. AWS Step Functions

  B. AWS Config

  C. AWS Lambda

  D. Amazon CloudWatch

  Correct Answer: A

• Question 515:

  A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud. Which AWS service should the company use to reduce management overhead for this environment?

  A. Amazon Elastic Container Service (Amazon ECS)

  B. Amazon SageMaker

  C. Amazon RDS

  D. Amazon Athena

  Correct Answer: C

• Question 516:

  A company is developing a new web application. The company must give users the ability to log in to the application through social identity providers. Which AWS service will meet these requirements?

  A. AWS Directory Service

  B. Amazon Cognito

  C. AWS identity and Access management (IAM)

  D. AWS Single Sign-On

  Correct Answer: B

  B. Amazon Cognito

  Amazon Cognito is the AWS service that allows users to log in to a web application through social identity providers such as Google, Facebook, and Amazon. It also enables user authentication and access control for your application.

• Question 517:

  If a company wants to build an interactive chatbot to make a call center more efficient, which AWS service should be used?

  A. Amazon Connect

  B. Amazon Lex

  C. Amazon Translate

  D. Amazon Polly

  Correct Answer: B

• Question 518:

  A company wants the ability to accommodate peak application usage without purchasing equipment for on-premises data centers. Which AWS Cloud benefit is the company seeking?

  A. High availability

  B. Security

  C. Reliability

  D. Elasticity

  Correct Answer: D

• Question 519:

  A company acquired another corporation. The company now has two AWS accounts.

  Which AWS service or tool can the company use to consolidate the billing for these two accounts?

  A. AWS Systems Manager

  B. AWS Organizations

  C. AWS License Manager

  D. Cost Explorer

  Correct Answer: B

• Question 520:

  A company needs the historical cost and service usage details of its Amazon EC2 instances. Which AWS service or tool will provide this information?

  A. AWS Budgets

  B. Amazon Forecast

  C. AWS Cost Explorer

  D. AWS Pricing Calculator

  Correct Answer: C

  Explanation: AWS Cost Explorer helps you visualize, understand, and manage your AWS costs and usage over a daily or monthly granularity. You can also access your data with further granularity by enabling hourly and resource level granularity.