Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 531:

  Which AWS service or feature can a company use to apply security rules to a subnet for Amazon EC2 instances?

  A. AWSWAF

  B. AWS Shield

  C. Network ACLs

  D. Security groups

  Correct Answer: C

  C. Network ACLs

  Network Access Control Lists (Network ACLs) are a feature of Amazon VPC that act as a firewall for controlling traffic in and out of a subnet. Network ACLs enable companies to create rules that allow or deny traffic to their Amazon EC2

  instances based on IP protocol, port, and source or destination IP address range. Network ACLs are stateless, meaning that return traffic must be explicitly allowed by rules.

  AWS WAF is a web application firewall that helps protect web applications from common web exploits.

  AWS Shield is a service that provides DDoS protection for applications running on AWS.

  Security Groups are another feature of Amazon VPC that act as a firewall for controlling traffic to Amazon EC2 instances. Security groups are stateful, meaning that they automatically allow return traffic.

• Question 532:

  A company needs to run a workload that requires low-latency access to an on-premises data center. The company wants a fully managed service to extend its existing VPC to local resources.

  Which AWS service or resource should the company use?

  A. AWS Outposts

  B. Amazon Connect

  C. AWS Snowball Edge

  D. Amazon WorkLink

  Correct Answer: A

  Explanation: comparison between the outpost and Local zone "should be local and on-premises" local zones are not on premises at all https://aws.amazon.com/blogs/compute/aws-local-zones-and-aws-outposts-choosing-the- right-technology-for-your-edge-workload/

• Question 533:

  Which AWS service helps users audit API activity across their AWS account?

  A. AWS CloudTrail

  B. Amazon Inspector

  C. AWSWAF

  D. AWS Config

  Correct Answer: A

• Question 534:

  Which of the following is characteristic of AWS Regions and Availability Zones? (Choose two.)

  A. Regions bring AWS services to on-premises facilities.

  B. Regions consist of multiple Availability Zones.

  C. An Availability Zone contains several Regions.

  D. Regions are within 100 km (60 miles) of each other.

  E. Regions are located around the world.

  Correct Answer: BE

• Question 535:

  Which AWS service or feature can a company use to estimate AWS costs before provisioning workloads?

  A. AWS Pricing Calculator

  B. AWS Cost and Usage Report

  C. Cost Explorer

  D. AWS Budgets

  Correct Answer: A

• Question 536:

  A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service must support standard SQL.

  Which AWS service will meet these requirements?

  A. Amazon Redshift

  B. AWS Glue

  C. Amazon Athena

  D. Amazon Kinesis Data Streams

  Correct Answer: C

• Question 537:

  A company is building a business intelligence solution using Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it.

  Which service should the company use?

  A. Amazon CloudWatch

  B. AWS Personal Health Dashboard

  C. AWS Service Catalog

  D. Amazon QuickSight

  Correct Answer: D

• Question 538:

  A developer needs to use a standardized template to create copies of a company's AWS architecture for development, test, and production environments. Which AWS service should the developer use to meet this requirement?

  A. AWS Cloud Map

  B. AWS CloudFormation

  C. Amazon CloudFront

  D. AWS CloudTrail

  Correct Answer: B

• Question 539:

  How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?

  A. Companies can avoid provisioning too much capacity when they do not know how much capacity is required.

  B. Companies can expand into new geographic regions.

  C. Companies can access a range of technologies to experiment and innovate quickly.

  D. Companies can pay for IT resources only when they use the resources.

  Correct Answer: C

• Question 540:

  An ecommerce company has deployed a new web application on Amazon EC2 instances. The company wants to distribute incoming HTTP traffic evenly across all running instances.

  Which AWS service or resource will meet this requirement?

  A. Amazon EC2 Auto Scaling

  B. Application Load Balancer

  C. Gateway Load Balancer

  D. Network Load Balancer

  Correct Answer: B