Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 671:

  An application runs on multiple EC2 instances behind an ELB.

  Where is the session data best written so that it can be served reliably across multiple requests?

  A. Write data to Amazon ElastiCache.
  B. Write data to Amazon Elastic Block Store
  C. Write data to Amazon EC2 Instance Store
  D. Write data to the root filesystem
  A. Write data to Amazon ElastiCache.

• Question 672:

  A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload?

  A. On-Demand Instances
  B. Reserved Instances
  C. Dedicated Instances
  D. Spot Instances
  A. On-Demand Instances

  ---

  Explanation/Reference:

  On-demand instances are useful for running stateful workloads without making a long-term commitment, but if your workloads are stateless or can tolerate shorter run cycles, there's a more cost-effective instance type called a Spot Instance.

  Reference: https://www.gremlin.com/blog/implementing-cost-saving-strategies-on-amazon-ec-2-with-chaos-engineering/

• Question 673:

  Which tasks require the use of the AWS account root user? (Select TWO )

  A. Launching a new Amazon EC2 instance
  B. Viewing AWS CloudTrail logs
  C. Contacting AWS Support
  D. Changing AWS Support plans
  E. Changing billing currency
  D. Changing AWS Support plans
  E. Changing billing currency

  ---

  Explanation/Reference:

  Tasks that require root user credentials

  We recommend that you use an IAM user with appropriate permissions to perform tasks and access AWS resources. However, you can perform the tasks listed below only when you sign in as the root user of an account.

  Tasks

  Change your account settings. This includes the account name, email address, root user password, and root user access keys. Other account settings, such as contact information, payment currency preference, and Regions, do not require

  root user credentials.

  Restore IAM user permissions. If the only IAM administrator accidentally revokes their own permissions, you can sign in as the root user to edit policies and restore those permissions. Activate IAM access to the Billing and Cost Management

  console. View certain tax invoices. An IAM user with the aws-portal:ViewBilling permission can view and download VAT invoices from AWS Europe, but not AWS Inc or Amazon Internet Services Pvt. Ltd (AISPL).

  Close your AWS account.

  Change your AWS Support plan or Cancel your AWS Support plan. For more information, see IAM for AWS Support

  Register as a seller in the Reserved Instance Marketplace.

  Configure an Amazon S3 bucket to enable MFA (multi-factor authentication) Delete.

  Edit or delete an Amazon S3 bucket policy that includes an invalid VPC ID or VPC endpoint ID.

  Sign up for GovCloud.

• Question 674:

  A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?

  A. AWS CloudFormation
  B. AWS Directory Service
  C. Amazon Lightsail
  D. AWS CodeDeploy
  A. AWS CloudFormation

• Question 675:

  Which AWS service can be used to encrypt data at rest?

  A. Amazon GuardDuty
  B. AWS Shield
  C. AWS Security Hub
  D. AWS Key Management Service (AWS KMS)
  D. AWS Key Management Service (AWS KMS)

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/security/how-to-protect-data-at-rest-with-amazon-ec2-instance-store-encryption/

• Question 676:

  Which services manage and automate application deployments on AWS? (Choose two.)

  A. AWS Elastic Beanstalk
  B. AWS CodeCommit
  C. AWS Data Pipeline
  D. AWS CloudFormation
  E. AWS Config
  B. AWS CodeCommit
  C. AWS Data Pipeline

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/getting-started/tutorials/continuous-deployment-pipeline/

• Question 677:

  According to the AWS shared responsibility model, what is the sole responsibility of AWS?

  A. Application security
  B. Edge location management
  C. Patch management
  D. Client-side data
  B. Edge location management

  ---

  Explanation/Reference:

  Client-side data, application security is the sole responsibility of the customer. Patch management is a shared responsibility. That leaves us with edge location management and since this out of the control of the customer, AWS is the one responsible for it.

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 678:

  Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?

  A. Use a monolithic design.
  B. Design for automation.
  C. Design for single points of failure.
  D. Loosely couple components.
  D. Loosely couple components.

  ---

  Explanation/Reference:

  Loosely coupled is correct. In the cloud practitioner course states that in a microservices approach, application components are loosely coupled. In this case, if a single component fails, the other components continue to work because they are communicating with each other. The loose coupling prevents the entire application from failing.

• Question 679:

  Which Amazon EC2 principle model offers the MOS I significant discount when compared to On- Demand Instances?

  A. Partial Upfront Reserved Instances tor a 1 year term
  B. All Upfront Reserved Instances for a 1 year term
  C. All Upfront Reserved Instances tor a 3 year term
  D. No Upfront Reserved Instances for a 3-year term
  C. All Upfront Reserved Instances tor a 3 year term

• Question 680:

  A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

  A. Amazon CloudWatch
  B. Amazon Inspector
  C. AWS CloudTrail
  D. AWS 1AM
  C. AWS CloudTrail

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/cloudtrail/