Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 711:

  According to the AWS shared responsibility model, the customer is responsible for maintaining:

  A. physical access to the AWS network.
  B. the patching of the host operating system.
  C. data encryption in Amazon S3.
  D. the operating system for Amazon DynamoDB
  C. data encryption in Amazon S3.

• Question 712:

  A company has an Amazon EC2 instance that must access AWS Secrets Manager to retrieve credentials. Which identity or service is required by the EC2 Instance to perform the task?

  A. Multi-factor authentication (MFA)
  B. IAM role
  C. IAM group
  D. Security groups
  D. Security groups

• Question 713:

  Which of the following is an advantage of consolidated billing on AWS?

  A. Volume pricing qualification
  B. Shared access permissions
  C. Multiple bills per account
  D. Eliminates the need for tagging
  A. Volume pricing qualification

  ---

  Explanation/Reference:

  If you have multiple standalone accounts, your charges might decrease if you add the accounts to an organization. AWS combines usage from all accounts in the organization to qualify you for volume pricing discounts. Reference: https://help.nops.io/consolidated-billing

• Question 714:

  A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?

  A. AWS Accounts
  B. AWS Regions
  C. Availability Zones
  D. Edge locations
  B. AWS Regions

  ---

  Explanation/Reference:

  Reference: https://www.botmetric.com/blog/having-a-disaster-recovery-plan-is-pivotal-the-dos-and-donts-on-aws-cloud/

• Question 715:

  Which AWS service can be used to retrieve compliance reports on demand?

  A. AWS Secrets Manager
  B. AWS Artifact
  C. AWS Security Hub
  D. AWS Certificate Manager
  B. AWS Artifact

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/artifact/

• Question 716:

  A developer is writing a new application that consists of multiple AWS microservices During quality assurance testing, the developer notices runtime errors in several areas of the application.

  Which AWS service should the developer use to help troubleshoot the errors?

  A. AWS CloudTrail
  B. AWS X-Ray
  C. Amazon CloudWatch
  D. Amazon Cognito
  B. AWS X-Ray

• Question 717:

  A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goal? (Choose two.)

  A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated.
  B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC.
  C. Use Amazon Athena to query data from the on-premises database servers.
  D. Connect the company's on-premises data center to AWS using AWS Direct Connect.
  E. Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers.
  B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC.
  D. Connect the company's on-premises data center to AWS using AWS Direct Connect.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/apn/amazon-vpc-for-on-premises-network-engineers-part-one/

• Question 718:

  What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

  A. Software licenses
  B. Networking
  C. Customer data
  D. Encryption keys
  C. Customer data

• Question 719:

  Which AWS services are managed at the AWS Region level rather than globally? (Select TWO.)

  A. Amazon S3
  B. AWS WAF
  C. Amazon EC2
  D. AWS Identity and Access Management (IAM)
  E. Amazon CloudFront
  A. Amazon S3
  C. Amazon EC2

• Question 720:

  A company's security team requires that all Amazon EC2 workloads use approved Amazon Machine Images (AMIs). Which AWS service should the company use to verify that the EC2 instances are using approved AMIs?

  A. Amazon CloudWatch
  B. Amazon Inspector
  C. AWS Config
  D. AWS Trusted Advisor
  C. AWS Config