Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 721:

  A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency. Which AWS service should the company use to meet these requirements?

  A. AWS IoT Greengrass
  B. AWS Lambda
  C. AWS Outposts
  D. AWS Snowball Edge
  C. AWS Outposts

  ---

  Explanation/Reference:

  The AWS service that the company should use to meet these requirements is C. AWS Outposts.

  AWS Outposts is a fully-managed service that extends AWS infrastructure, services, APIs, and tools to virtually any datacenter, co-location space, or on-premises facility for a truly consistent hybrid experience. With AWS Outposts, the company can run AWS services locally, including compute, storage, database, and analytics, while seamlessly connecting to AWS services in the cloud.

  This means that the company can process data, store data, and run applications with local system interdependencies that require low latency using AWS Outposts, which is located within their own datacenters or facilities. With AWS Outposts, the company can avoid the latency and data transfer costs that come with using cloud services located far away from their factories.

• Question 722:

  If a user has an AWS account with an enterprise level AWS support plan, who is the primary point of contact for billing or account inquiries?

  A. Solutions architect
  B. AWS Concierge Support team
  C. An AWS Marketplace seller
  D. AWS Partner Network (APN) partner
  B. AWS Concierge Support team

• Question 723:

  According to the AVVS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

  A. Amazon DynamoDB
  B. Amazon EC2 instances
  C. Amazon RDS instances
  D. Amazon S3
  B. Amazon EC2 instances

• Question 724:

  Which AWS services or features help protect Amazon EC2 instances from DDoS attacks by limiting network access to the instances? (Select TWO.)

  A. Network ACLs
  B. AWS Batch
  C. Security groups
  D. AWS Identity and Access Management (IAM)
  E. AWS CloudHSM
  A. Network ACLs
  C. Security groups

• Question 725:

  Which AWS service or feature acts as a firewall for Amazon EC2 instances?

  A. Network ACL
  B. Elastic network interface
  C. Amazon VPC
  D. Security group
  D. Security group

• Question 726:

  Which AWS service enables users to securely connect to AWS resources over the public internet?

  A. Amazon VPC peering
  B. AWS Direct Connect
  C. AWS VPN
  D. Amazon Pinpoint
  A. Amazon VPC peering

  ---

  Explanation/Reference:

  Reference: https://d1.awsstatic.com/whitepapers/aws-security-whitepaper.pdf (36)

• Question 727:

  A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet. Which AWS service or feature can the company use to meet these requirements?

  A. Network ACL
  B. AWS WAF
  C. Route table
  D. Security group
  D. Security group

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html

• Question 728:

  AWS Enterprise Support users have access to which service or feature that is not available to users with other AWS Support plans?

  A. AWS Trusted Advisor
  B. AWS Support case
  C. Concierge team
  D. Amazon Connect
  C. Concierge team

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/plans/

• Question 729:

  When architecting cloud applications, which of the following are a key design principle?

  A. Use the largest instance possible
  B. Provision capacity for peak load
  C. Use the Scrum development process
  D. Implement elasticity
  B. Provision capacity for peak load

  ---

  Explanation/Reference:

  Cloud services main proposition is to provide elasticity through horizontal scaling. It's already there. As for using largest instance possible, it is not a design principle that helps cloud applications in anyway. Scrum development process is not related to architecting. Therefore, a key principle is to provision your application for on-demand capacity. Peak loads is something that cloud applications experience everyday. Peak load management should be a necessary part of cloud application design principle.

  Reference: https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf

• Question 730:

  A company needs help with a specific question that is related to a planned AWS deployment of a business application. The company has only the AWS Basic Support plan.

  The company wants to have the question answered immediately by an expert who has adequate skills and experience. Which action should the company take to meet these requirements?

  A. Submit the question to AWS Support by phone or live chat.
  B. Submit the question in AWS re:Post
  C. Connect with other AWS customers by using AWS Connect
  D. Connect with an AWS professional by using AWS IQ.
  A. Submit the question to AWS Support by phone or live chat.