Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 561:

  Under the AWS shared responsibility model, the customer manages which of the following? (Choose two.)

  A. Decommissioning of physical storage devices
  B. Security group and ACL configuration
  C. Patch management of an Amazon RDS instance operating system
  D. Controlling physical access to data centers
  E. Patch management of an Amazon EC2 instance operating system
  B. Security group and ACL configuration
  E. Patch management of an Amazon EC2 instance operating system

  ---

  Explanation/Reference:

  Reference: https://www.whizlabs.com/blog/aws-security-shared-responsibility/

• Question 562:

  Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?

  A. Amazon Rekognition
  B. AWS Trusted Advisor
  C. Amazon GuardDuty
  D. Amazon CloudWatch
  C. Amazon GuardDuty

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/guardduty/

• Question 563:

  A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements. Which AWS service or program should the company use to determine which AWS services meet the regional requirements?

  A. AWS Audit Manager
  B. AWS Shield
  C. AWS Compliance Program
  D. AWS Artifact
  C. AWS Compliance Program

  ---

  Explanation/Reference:

  C. AWS Compliance Program

  The AWS Compliance Program provides a framework for customers to navigate regulatory requirements by providing information on how AWS services and features can help address compliance needs. AWS compliance programs help customers meet compliance requirements for industry-specific standards, such as HIPAA, PCI DSS, and others.

  In this scenario, the company needs to ensure that it meets regional regulatory requirements while building an application that uses AWS services. The AWS Compliance Program can help the company identify which AWS services and features can help meet regulatory requirements for European countries. The program provides resources such as whitepapers, reports, and certifications that can help organizations understand how AWS services can be used to support their compliance objectives.

• Question 564:

  A company needs to install an application in a Docker container. Which AWS service eliminates the need to provision and manage the container hosts?

  A. AWS Fargate
  B. Amazon FSx for Windows File Server
  C. Amazon Elastic Container Service (Amazon ECS)
  D. Amazon EC2
  A. AWS Fargate

  ---

  Explanation/Reference:

  https://aws.amazon.com/ecs/

  Optimize your time with AWS Fargate serverless compute for containers, which eliminates the need to configure and manage control plane, nodes, and instances.

  https://aws.amazon.com/fargate/

  Deploy and manage your applications, not infrastructure. Fargate removes the operational overhead of scaling, patching, securing, and managing servers.

• Question 565:

  Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud?

  A. Managing edge locations
  B. Physical security
  C. Firewall configuration
  D. Global infrastructure
  B. Physical security

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 566:

  A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS

  later.

  Which AWS service should the company use to meet these requirements?

  A. AWS IoT Core
  B. Amazon Lightsail
  C. AWS Storage Gateway
  D. AWS Snowball Edge
  D. AWS Snowball Edge

  ---

  Explanation/Reference:

  AWS Snow Family- The AWS Snow Family is a collection of physical devices that help migrate large amounts of data into and out of the cloud without depending on networks. This helps you apply the wide variety of AWS services for analytics, file systems, and archives to your data. You can use AWS Snow Family services for data transfer and occasional pre-processing on location. Some large data transfer examples include cloud migration, disaster recovery, data center relocation, and/or remote data collection projects. These projects typically require you to migrate large amounts of data in the shortest, and most cost-effective, amount of time.

• Question 567:

  What is the best resource for a user to find compliance-related information and reports about AWS?

  A. AWS Artifact
  B. AWS Marketplace
  C. Amazon Inspector
  D. AWS Support
  A. AWS Artifact

• Question 568:

  Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Choose two.)

  A. Physical and environmental controls
  B. Patch management
  C. Configuration management
  D. Account structures
  E. Choice of the AWS Region where data is stored
  B. Patch management
  C. Configuration management

• Question 569:

  Which aws service allows users to provision infrastructure as code?

  A. AWS CodeBuild
  B. AWS CloudFormation
  C. AWS Organizations
  D. AWS CodeCommit
  B. AWS CloudFormation

• Question 570:

  According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

  A. Amazon DynamoDB
  B. Amazon EC2 instances
  C. Amazon RDS instances
  D. Amazon S3
  B. Amazon EC2 instances