Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 51:

  Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model?

  A. Operational excellence

  B. Performance efficiency

  C. Reliability

  D. Security

  Correct Answer: D

  Reference: https://aws.amazon.com/blogs/apn/the-5-pillars-of-the-aws-well-architected-framework/

• Question 52:

  Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?

  A. AWS Shield

  B. Amazon Macie

  C. AWS Network Firewall

  D. Amazon Cognito

  Correct Answer: B

  https://aws.amazon.com/macie/

  Amazon Macie is a data security and data privacy service that uses machine learning (ML) and pattern matching to discover and protect your sensitive data.

• Question 53:

  Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

  A. AWS Service Catalog

  B. AWS Systems Manager

  C. AWS IAM Access Analyzer

  D. AWS Organizations

  Correct Answer: C

  Access Analyzer helps you identify the resources in your organization and accounts, such as Amazon S3 buckets or IAM roles, shared with an external entity. This lets you identify unintended access to your resources and data, which is a security risk. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

• Question 54:

  A company wants to run production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week. Which AWS Support plan will meet these requirements?

  A. AWS Basic Support

  B. AWS Enterprise Support

  C. AWS Business Support

  D. AWS Developer Support

  Correct Answer: B

  The AWS technical account manager (TAM) is only available on the Enterprise Plan.

• Question 55:

  Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?

  A. Use a monolithic design.

  B. Design for automation.

  C. Design for single points of failure.

  D. Loosely couple components.

  Correct Answer: D

  Loosely coupled is correct. In the cloud practitioner course states that in a microservices approach, application components are loosely coupled. In this case, if a single component fails, the other components continue to work because they are communicating with each other. The loose coupling prevents the entire application from failing.

• Question 56:

  Which AWS services are managed database services? (Select TWO.)

  A. Amazon Elastic Block Store (Amazon EBS)

  B. Amazon S3

  C. Amazon DynamoDB

  D. Amazon RDS

  E. Amazon Elastic Pile System (Amazon EFS)

  Correct Answer: CD

• Question 57:

  A company is using the AWS Free Tier for several AWS services for an application. What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?

  A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.

  B. AWS Support will contact the company to set up standard service charges.

  C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.

  D. The company's AWS account will be frozen and can be restarted after a payment plan is established.

  Correct Answer: A

• Question 58:

  A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network. Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?

  A. Network ACl

  B. Security groups

  C. AWS WAF

  D. Amazon GuardDuty

  Correct Answer: B

  AWS WAF is a web application firewall that lets you monitor the HTTP(S) requests that are forwarded to your protected web application resources. You can protect the following resource types: Amazon CloudFront distribution Amazon API Gateway REST API Application Load Balancer

  AWS AppSync GraphQL API Amazon Cognito user pool

• Question 59:

  A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs. Which AWS Billing and Cost Management tool provides this data in a graphical format?

  A. AWS Bills

  B. Cost Explorer

  C. AWS Cost and Usage Report

  D. AWS Budgets

  Correct Answer: B

  Both Cost Explorer and Cost and Usage reports are for same purpose. The main difference is Cost Explorer gives graphically representation. so correct answer is B

• Question 60:

  Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

  A. Amazon Route 53

  B. Amazon Macie

  C. AWS Direct Connect

  D. AWS PrivateLink

  Correct Answer: C

  Correct answer is C- Direct connect is for private dedicated connection between on premise and AWS. PrivateLink provides direct secure connections from VPCs to other AWS services. VPC Private Link is a way of making your service available to set of consumers. You can expose a service and the consumers can consume your service by creating an endpoint for your service.With PrivateLink, endpoints are instead created directly inside of your VPC, using Elastic Network Interfaces (ENIs) and IP addresses in your VPC's subnets.To use AWS PrivateLink, create a VPC endpoint in your VPC, specifying the name of the service and a subnet. This creates an elastic network interface in the subnet that serves as an entry point for traffic destined to the service. The service is now in your VPC, enabling connectivity to AWS services via private IP addresses.