Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 711:

  A company is moving its virtual machines (VMs) from an on-premises environment to the AWS Cloud. The company plans to deploy Amazon EC2 instances. Which cloud computing model will the company use in this scenario?

  A. Platform as a service (PaaS)

  B. Infrastructure as a service (laaS)

  C. Function as a service (FaaS)

  D. Software as a service (SaaS)

  Correct Answer: B

• Question 712:

  A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet these requirements?

  A. AWS Artifact

  B. AWS Config

  C. Amazon Inspector

  D. Amazon CloudWatch

  Correct Answer: B

• Question 713:

  A user is a new AWS account owner who has no special access requirements. What should this user do with the AWS account root user access keys?

  A. Share the keys with all relevant internal users so that those users can programmatically access AWS services.

  B. Post the keys on GitHub to provide development teams with access to AWS services.

  C. Use the keys for access, but do not share the keys with anyone.

  D. Delete the keys and create IAM users.

  Correct Answer: D

  Deleting the root user access keys is an important security best practice because it reduces the risk of unauthorized access to your AWS resources. It is recommended to only use the root user account to create the first IAM user account and then disable or remove the root user access keys.

• Question 714:

  A company needs to design an AWS disaster recovery plan to cover multiple geographic areas. Which action will meet this requirement?

  A. Configure multiple AWS accounts.

  B. Configure the architecture across multiple Availability Zones in an AWS Region.

  C. Configure the architecture across multiple AWS Regions.

  D. Configure the architecture among many edge locations.

  Correct Answer: C

• Question 715:

  A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive. Which AWS service can be used to improve the database performance?

  A. Amazon DynamoDB Accelerator (DAX)

  B. Amazon EMR

  C. Amazon ElastiCache

  D. Amazon Redshift

  Correct Answer: C

• Question 716:

  Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

  A. Amazon FSx for Windows File Server

  B. Amazon Workspaces virtual Windows desktop

  C. AWS Directory Service for Microsoft Active Directory

  D. Amazon RDS for Microsoft SQL Server

  Correct Answer: B

• Question 717:

  Which AWS service is a fully hosted version control serviceWhich AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account?

  A. Amazon Inspector

  B. Amazon Macie

  C. Amazon Detective

  D. Amazon CloudWatch

  Correct Answer: C

• Question 718:

  An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

  A. Cost of application software licenses

  B. Cost of the hardware infrastructure on AWS

  C. Cost of power for the AWS servers

  D. Cost of physical security for the AWS data center

  Correct Answer: A

• Question 719:

  Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?

  A. Cost optimization

  B. Reliability

  C. Performance efficiency

  D. Operational excellence

  Correct Answer: D

• Question 720:

  Which of the following are design principles of the reliability pillar of the AWS Well- Architected Framework? (Select TWO.)

  A. Perform operations as code.

  B. Stop guessing capacity.

  C. Adopt serverless architecture whenever possible.

  D. Use build and deployment management systems.

  E. Make changes to infrastructure by using automation.

  Correct Answer: BE