Which of the following can be used to identity a specific user who slopped an Amazon EC2 instance?
A. AWS CloudTrail
B. Amazon inspector
C. Amazon CloudWatch
D. VPC Flow Logs
A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS) attacks. Which AWS service or tool will provide this protection?
A. Network access control list (ACL)
B. AWS Shield
C. Security group
D. Amazon GuardDuty
A system administrator notices that several Amazon EC2 instances nave been terminated. The system administrator needs to identity the user or AWS API call that terminated these instances. Which AWS service should the system administrator use to meet this requirement?
A. AWS Trusted Advisor
B. AWS CloudTrail
C. Amazon Inspector
D. Amazon Detective
A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote customer service agents can use to create and manage voice and chat contact flows. Which AWS service will meet these requirements?
A. Amazon EventBridge (Amazon CloudWatch Events)
B. Amazon Connect
C. Amazon Cognito
D. AWS Direct Connect
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?
A. AWS Identity and Access Management (IAM)
B. Amazon Cognito
C. AWS Single Sign-On
D. AWS CL
A company is running an Amazon EC2 instance in a VPC.
Which of the following can the company use to route and filter incoming network requests for the EC2 instance?
A. Route tables and web application firewalls
B. Security groups and route tables
C. Security groups and a network intrusion system
D. Route tables and AWS Shield
Which of the following does Amazon CloudFront use to distribute content to users around the world?
A. Amazon VPC
B. AWS Local Zones
C. Edge locations
D. Availability Zones
A company plans to migrate complex legacy systems to AWS. The company will use several operating systems multiple databases and multiple programming languages. Which benefit of the AWS Cloud does this scenario represent?
A. Scalability
B. Flexibility
C. Reliability
D. Security
A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud. How should the company make this comparison?
A. Review the AWS shared responsibility model.
B. Audit existing software and hardware licensing costs.
C. Analyze the AWS Well-Architected Framework.
D. Use Migration Evaluator.
A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances.
According to AWS security best practices, how should the company grant permissions to allow the applications to access the S3 bucket?
A. Use the AWS account root user access keys.
B. Use the AWS access key ID and the EC2 secret access key.
C. Use an IAM role with the necessary permissions.
D. Activate multi-factor authentication (MFA) and versioning on the S3 bucket.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CLF-C01 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.