Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 781:

  A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be interrupted. Which EC2 instance type will meet these requirements?

  A. Spot Instances

  B. On-Demand Instances

  C. Reserved Instances

  D. Dedicated Instances

  Correct Answer: A

  Spot Instances- Spot Instances are the most cost-effective choice if you are flexible about when your applications run and if your applications can be interrupted.

• Question 782:

  A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories, and version controls. Which AWS service should the developer use?

  A. AWS CodeStar

  B. Amazon CodeGuru

  C. AWS CodeCommit

  D. AWS CodePipeline

  Correct Answer: C

• Question 783:

  A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?

  A. AWS Customer Service team

  B. AWS Sales team

  C. AWS Abuse team

  D. AWS Technical Support team

  Correct Answer: C

• Question 784:

  Who can create and manage access keys for an AWS account root user?

  A. The AWS account owner

  B. An IAM user that has administrator permissions

  C. IAM users within a designated group

  D. An IAM user that has the required role

  Correct Answer: A

  Anyone who has root user credentials for your AWS account has unrestricted access to all the resources in your account, including billing information. When you create access keys, you create the access key ID and secret access key as a set.

• Question 785:

  A company needs to schedule the rotation of database credentials in the AWS Cloud.

  Which AWS service should the company use to perform this task?

  A. AWS Identity and Access Management (IAM)

  B. AWS Managed Services (AMS)

  C. Amazon RDS

  D. AWS Secrets Manager

  Correct Answer: D

  AWS Secrets Manager makes it easier to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. The key features of this service include the ability to:

  1.

  Secure and manage secrets centrally. You can store, view, and manage all your secrets centrally. By default, Secrets Manager encrypts these secrets with encryption keys that you own and control. You can use fine-grained IAM policies or resource-based policies to control access to your secrets. You can also tag secrets to help you discover, organize, and control access to secrets used throughout your organization.

  2.

  Rotate secrets safely. You can configure Secrets Manager to rotate secrets automatically without disrupting your applications. Secrets Manager offers built-in integrations for rotating credentials for all Amazon RDS databases (MySQL,

  PostgreSQL, Oracle, Microsoft SQL Server, MariaDB, and Amazon Aurora.) You can also extend Secrets Manager to meet your custom rotation requirements by creating an AWS Lambda function to rotate other types of secrets.

  3.

  Transmit securely. Secrets are transmitted securely over Transport Layer Security (TLS) protocol 1.2. You can also use Secrets Manager with Amazon Virtual Private Cloud (Amazon VPC) endpoints powered by AWS Privatelink to keep

  this communication within the AWS network and help meet your compliance and regulatory requirements to limit public internet connectivity.

  4.

  Pay as you go. Pay for the secrets you store in Secrets Manager and for the use of these secrets; there are no long-term contracts, licensing fees, or infrastructure and personnel costs. For example, a typical production-scale web

  application will generate an estimated monthly bill of $6. If you follow along the instructions in this blog post, your estimated monthly bill for Secrets Manager will be $1. Note: you may incur additional charges for using Amazon RDS and

  Amazon Lambda, if you've already consumed the free tier for these services.

  Now that you're familiar with Secrets Manager features, I'll show you how to store and automatically rotate credentials for an Oracle database hosted on Amazon RDS. I divided these instructions into three phases:

  1.

  Phase 1: Store and configure rotation for the superuser credential

  2.

  Phase 2: Store and configure rotation for the application credential

  3.

  Phase 3: Retrieve the credential from Secrets Manager programmatically

• Question 786:

  Which AWS service should a company use to create a NoSQL database?

  A. Amazon Aurora

  B. Amazon DynamoDB

  C. Amazon Redshift

  D. Amazon Neptune

  Correct Answer: B

• Question 787:

  What is an AWS Region?

  A. A broad set of global, cloud-based products that include compute, storage, and databases

  B. A physical location around the world where data centers are clustered

  C. One or more discrete data centers with redundant power, networking, and connectivity

  D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users

  Correct Answer: B

  AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of multiple, isolated, and physically separate AZs within a geographic area.

• Question 788:

  A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed. Which AWS services can provide this information? (Select TWO.)

  A. AWS Artifact

  B. AWS Trusted Advisor

  C. AWS Config

  D. AWS Cloud Trail

  E. AWS Identity and Access Management (IAM)

  Correct Answer: CD

  AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks. These checks identify ways to optimize your AWS infrastructure, improve security and performance, reduce costs, and monitor service quotas. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and remediation actions. AWS Identity and Access Management (IAM) provides fine-grained access control across all of AWS. With IAM, you can specify who can access which services and resources, and under which conditions. With IAM policies, you manage permissions to your workforce and systems to ensure least-privilege permissions.

• Question 789:

  A company plans to launch an application that will run in multiple locations within the United States. The company needs to identify the two AWS Regions where the application can operate at the lowest price. Which AWS service or feature should the company use to determine the Regions that offer the lowest price?

  A. Cost Explorer

  B. AWS Budgets

  C. AWS Trusted Advisor

  D. AWS Pricing Calculator

  Correct Answer: D

  The AWS service that the company can use to determine the Regions that offer the lowest price for their application is D. AWS Pricing Calculator. The AWS Pricing Calculator is a web-based tool that allows customers to estimate their monthly bill based on their expected usage of various AWS services, including compute, storage, database, and networking. The calculator provides pricing information for all AWS Regions, allowing customers to compare prices and choose the most cost-effective Region for their application. By selecting the AWS services that their application will use and estimating their usage, the company can use the Pricing Calculator to determine the Regions that offer the lowest price.

• Question 790:

  Which tasks are responsibilities of AWS, according to the AWS shared responsibility model? (Select TWO.)

  A. Encrypt client-side data and authenticate data integrity.

  B. Manage customer data.

  C. Perform identity and access management.

  D. Provide physical security for Availability Zones.

  E. Patch the operating system of Amazon S3

  Correct Answer: AD