Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 71:

  How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model?

  A. AWS resources do not incur costs

  B. There are no Infrastructure operating costs

  C. There are no upfront cost commitments

  D. There are no software licensing costs

  Correct Answer: C

• Question 72:

  A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture. What can the company do to meet this requirement?

  A. Scale vertically to a larger EC2 instance size.

  B. Scale horizontally across multiple Availability Zones.

  C. Purchase an EC2 Dedicated Instance.

  D. Change the EC2 instance family to a compute optimized instance.

  Correct Answer: B

• Question 73:

  A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days. Which benefit has this company experienced by moving to the AWS Cloud?

  A. Elasticity

  B. Flexibility

  C. Agility

  D. Resilience

  Correct Answer: C

  https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

• Question 74:

  Which of the following are included in AWS Enterprise Support? (Select TWO.)

  A. AWS technical account manager (TAM)

  B. AWS partner-led support

  C. AWS Professional Services

  D. Support of third-party software integration to AWS

  E. 5-minute response time for critical issues

  Correct Answer: AD

• Question 75:

  A global media company uses AWS Organizations to manage multiple AWS accounts. Which AWS service or feature can the company use to limit the access to AWS services for member accounts?

  A. AWS Identity and Access Management (IAM)

  B. Service control policies (SCPs)

  C. Organizational units (OUs)

  D. Access control lists (ACLs)

  Correct Answer: B

  in AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs). SCPs enable you to place restrictions on the AWS services, resources, and individual API actions that users and roles in each account can access.

• Question 76:

  A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month How can the user see if a change was made?

  A. Use Amazon EC2 to see if the security group was changed.

  B. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group.

  C. Use AWS CloudTrail to see if the security group was changed.

  D. Use Amazon CloudWatch to see if the security group was changed.

  Correct Answer: C

• Question 77:

  Which AWS service will help protect applications running on AWS from DDoS attacks?

  A. Amazon GuardDuty

  B. AWS WAF

  C. AWS Shield

  D. Amazon Inspector

  Correct Answer: C

  You can use AWS WAF, AWS Shield, and AWS Firewall Manager together to create a comprehensive security solution.

  Use AWS WAF to monitor requests that are forwarded to your web applications and control access to your content.

  Use AWS Shield to help protect against DDoS attacks.

  Use AWS Firewall Manager to set up your firewall rules and apply the rules automatically across accounts and resources, even as new resources are added.

• Question 78:

  Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.)

  A. AWS Storage Gateway

  B. Virtual private gateway

  C. NAT gateway

  D. Customer gateway

  E. Internet gateway

  Correct Answer: BD

  The VPC has an attached virtual private gateway, and your on-premises (remote) network includes a customer gateway device, which you must configure to enable the Site-to-Site VPN connection. You set up the routing so that any traffic from the VPC bound for your network is routed to the virtual private gateway.

• Question 79:

  A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection. Which AWS service or feature can be used to establish this connection?

  A. AWS Client VPN

  B. VPC peering

  C. AWS Direct Connect

  D. VPC endpoints

  Correct Answer: B

• Question 80:

  According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?

  A. Manage connections to the database

  B. Install Microsoft SQL Server

  C. Design encryption-at-rest strategies

  D. Apply minor database patches

  Correct Answer: A