Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 661:

  What is the LEAST expensive AWS Support plan that provides the full set of AWS Trusted Advisor best practice checks for cost optimization?

  A. AWS Enterprise Support

  B. AWS Business Support

  C. AWS Developer Support

  D. AWS Basic Support

  Correct Answer: B

• Question 662:

  Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.)

  A. Amazon ElastiCache

  B. Amazon RDS for Oracle

  C. Amazon Neptune

  D. Amazon DocumentDB (with MongoDB compatibility)

  E. Amazon Redshift

  Correct Answer: CD

  C. Amazon Neptune is a fast, reliable, fully managed graph database service that enables you to build and run applications that work with highly connected datasets. Neptune uses a distributed, fault-tolerant architecture that is designed to provide high availability and durability. Data is automatically replicated across multiple Availability Zones, which helps ensure that the database remains available even in the event of a failure.

  D. Amazon DocumentDB (with MongoDB compatibility) is a fully managed document database service that is designed to be compatible with MongoDB workloads. DocumentDB uses a distributed, fault-tolerant architecture that is designed to provide high availability and durability. Data is automatically replicated across multiple Availability Zones, which helps ensure that the database remains available even in the event of a failure.

• Question 663:

  A company is building AWS architecture to deliver real-time data feeds from an on- premises data center into an application that runs on AWS. The company needs a consistent network connection with minimal latency. What should the company use to connect the application and the data center to meet these requirements?

  A. AWS Direct Connect

  B. Public internet

  C. AWS VPN

  D. Amazon Connect

  Correct Answer: D

• Question 664:

  A company is choosing an AWS Support plan. The company needs the ability to contact cloud support engineers by phone, email, and chat 24 hours a day, 7 days a week. What is the LEAST expensive AWS Support plan that meets these requirements?

  A. AWS Basic Support

  B. AWS Developer Support

  C. AWS Business Support

  D. AWS Enterprise Support

  Correct Answer: C

  https://aws.amazon.com/premiumsupport/plans/

• Question 665:

  Which AWS service can a company use to analyze and debug performance issues of an AWS Lambda function?

  A. Amazon Inspector

  B. Amazon Detective

  C. AWS CodeStar

  D. AWS X-Ray

  Correct Answer: D

  https://docs.aws.amazon.com/lambda/latest/operatorguide/general-approach.html

• Question 666:

  A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner. Which of the following should the company use to meet these requirements?

  A. AWS Snowball Edge device

  B. Amazon Elastic Block Store (Amazon EBS)

  C. Amazon Elastic File System (Amazon EFS)

  D. Amazon S3

  Correct Answer: A

  https://aws.amazon.com/blogs/storage/migrating-hundreds-of-tb-of-data-to-amazon-s3-with-aws-datasync/

• Question 667:

  A company is designing an application. For the data persistence layer, the company wants to use a NoSQL database. Which AWS service should the company use for the database?

  A. Amazon Redshift

  B. AWS DataSync

  C. Amazon Athena

  D. Amazon DynamoDB

  Correct Answer: D

• Question 668:

  A company needs an AWS service that can monitor the company's AWS account If the service identifies misconfigurations; the company's operations team must receive an alert Additionally, the service must remediate the issues by invoking AWS Lambda functions.

  Which service will meet these requirements?

  A. Amazon Macie

  B. Amazon GuardDuty

  C. AWS Config

  D. AWS Trusted Advisor

  Correct Answer: D

• Question 669:

  A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances The suspicious activity is coming from a single IP address Which AWS service should the company use to block access from this IP address?

  A. AWS Shield

  B. AWS Config

  C. Amazon GuardDuty

  D. AWS WAF

  Correct Answer: D

  AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to your protected web application resources. You can protect the following resource types:

  1.

  Amazon CloudFront distribution

  2.

  Amazon API Gateway REST API

  3.

  Application Load Balancer

  4.

  AWS AppSync GraphQL API

  5.

  Amazon Cognito user pool

  6.

  AWS WAF also lets you control access to your content.

  Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, your protected resource responds to requests either with the requested content, with an HTTP 403 status code (Forbidden), or with a custom response. https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html

• Question 670:

  A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers. Which combination of AWS services should the company use to meet these requirements? (Select TWO)

  A. Amazon EC2

  B. Amazon EC2 Auto Scaling

  C. AWS Elastic Beanstalk

  D. Amazon CloudFront

  E. AWS Fargate

  Correct Answer: CE