Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 521:

  A company needs software solutions that are hosted on the AWS platform or that are integrated with the AWS platform. The company needs solutions from independent software vendors as well as management and security vendors. Which group or team can provide these solutions?

  A. AWS technical account managers (TAMs)
  B. AWS Partner Network (APN) Consulting Partners
  C. AWS Concierge Support
  D. AWS Partner Network (APN) Technology Partners
  B. AWS Partner Network (APN) Consulting Partners

• Question 522:

  Which AWS service can be used to turn text into life-like speech?

  A. Amazon Polly
  B. Amazon Transcribe
  C. Amazon Rekognition
  D. Amazon Lex
  A. Amazon Polly

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/polly/#:~:text=Amazon%20Polly%20is%20a%20service,synthesize%20natural%20sounding%20human%20speech.

• Question 523:

  Which AWS services after compute capabilities? (Select TWO.)

  A. Amazon EC2
  B. Amazon S3
  C. Amazon Elastic Block Store (Amazon EBS)
  D. Amazon Cognito
  E. AWS lambda
  A. Amazon EC2
  E. AWS lambda

• Question 524:

  Which AWS service can defend against DDoS attacks?

  A. AWS Firewall Manager
  B. AWS Shield Standard
  C. AWS WAF
  D. Amazon Inspector
  B. AWS Shield Standard

  ---

  Explanation/Reference:

  B. AWS Shield Standard is a free service that is automatically included with all AWS accounts, and it provides protection against common network and transport layer DDoS attacks. AWS Firewall Manager is used to centrally configure and manage firewall rules across multiple accounts and resources, while AWS WAF (Web Application Firewall) is used to protect web applications from common web-based attacks such as SQL injection and cross-site scripting (XSS). Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

• Question 525:

  Which task does AWS perform automatically?

  A. Encrypt data that is stored in Amazon DynamoDB.
  B. Patch Amazon EC2 instances.
  C. Encrypt user network traffic.
  D. Create TLS Certificates for users' websites.
  A. Encrypt data that is stored in Amazon DynamoDB.

  ---

  Explanation/Reference:

  A. DynamoDB

  All user data stored in Amazon DynamoDB is fully encrypted at rest. DynamoDB encryption at rest provides enhanced security by encrypting all your data at rest using encryption keys stored in AWS Key Management Service (AWS KMS)

• Question 526:

  Which of the following consists of one or more isolated data centers in the same regional area that are interconnected through low-latency networks?

  A. Availability Zone
  B. Edge location
  C. AWS Region
  D. Private networking
  A. Availability Zone

• Question 527:

  A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves Which AWS service should the developers use to meet these requirements?

  A. AWS CloudFormation
  B. AWS CodeBuild
  C. AWS Elastic Beanstalk
  D. AWS CodeDeploy
  C. AWS Elastic Beanstalk

  ---

  Explanation/Reference:

  The AWS service that the developers can use to deploy their applications without having to provision the infrastructure themselves is:

  C. AWS Elastic Beanstalk: It is a fully managed service that provides developers with a platform to deploy, manage, and scale their applications without having to worry about the underlying infrastructure. With Elastic Beanstalk, developers can simply upload their application code and Elastic Beanstalk automatically handles the deployment, capacity provisioning, load balancing, and automatic scaling of the application. This simplifies the application deployment process and enables developers to focus on building and improving their applications.

• Question 528:

  A company needs to optimize the cost of its AWS architecture by identifying unused resources and idle resources. Which AWS service or feature should the company use to meet this requirement?

  A. Amazon Inspector
  B. AWS Config
  C. AWS Trusted Advisor
  D. AWS Organizations
  C. AWS Trusted Advisor

• Question 529:

  How can a company maximize its application uptime in the AWS Cloud?

  A. Deploy multiple copies of the application in different Availability Zones in the same subnet. Fail over with Amazon Route 53.
  B. Deploy multiple copies of the application across multiple Availability Zones within a VPC. Manually fail over if one site is unavailable.
  C. Deploy the application to a single Availability Zone and fall back to a static page if the application is unavailable.
  D. Deploy multiple copies of the application across multiple Availability Zones and load balance across each Availability Zone for automatic failover
  D. Deploy multiple copies of the application across multiple Availability Zones and load balance across each Availability Zone for automatic failover

• Question 530:

  Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)

  A. Secure the virtualization layer.
  B. Encrypt data and maintain data integrity.
  C. Patch the Amazon RDS operating system.
  D. Maintain identity and access management controls.
  E. Secure Availability Zones.
  B. Encrypt data and maintain data integrity.
  D. Maintain identity and access management controls.

  ---

  Explanation/Reference:

  D. Maintain identity and access management controls.

  The AWS shared responsibility model defines the security responsibilities of both the customer and AWS. According to this model, the customer is responsible for:

  B. Encrypting data and maintaining data integrity: This means that the customer is responsible for encrypting sensitive data, both at rest and in transit, as well as maintaining data integrity by ensuring that data is not tampered with or modified without authorization.

  D. Maintaining identity and access management controls: This means that the customer is responsible for managing the identities and access rights of users and applications that access resources on AWS. This includes tasks such as creating and managing users, groups, and roles, as well as setting up and enforcing access policies.