Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 831:

  A company needs to use AWS Identity and Access Management (IAM) to attach an IAM policy to all IAM users in an AWS account.

  Which solution meets this requirement?

  A. Attach the IAM policy to each IAM user.

  B. Attach the IAM policy to the IAM group containing all the IAM users.

  C. Attach the IAM policy to the IAM role containing all the IAM users.

  D. Apply the IAM policy to the entire AWS account.

  Correct Answer: C

• Question 832:

  An ecommerce company recently started using the AWS Cloud.

  Which security-related tasks are the company's responsibility? (Choose two.)

  A. Restrict who is allowed physical access to the hosts that run the company's Amazon EC2 instances.

  B. Install security patches on Amazon EC2 Linux instances.

  C. Choose to encrypt data at rest that is stored on Amazon S3.

  D. Wipe Amazon Elastic Block Store (Amazon EBS) volumes clean before they are decommissioned.

  E. Conduct database patching for Amazon RDS instances.

  Correct Answer: CE

• Question 833:

  Which of the following are advantages of using AWS for cloud computing? (Choose two.)

  A. Users can increase speed and agility by deploying services with just one click.

  B. Users receive a discount on hardware that they purchase for their data centers.

  C. Users can reserve excess capacity to ensure that resources are always available.

  D. Users trade variable expenses for capital expenses.

  E. Users benefit from massive economies of scale.

  Correct Answer: AE

• Question 834:

  Which AWS services or features provide high availability and low latency by enabling failover across different AWS Regions? (Choose two.)

  A. Amazon Route 53

  B. Network Load Balancer

  C. Amazon S3 Transfer Acceleration

  D. AWS Global Accelerator

  E. Application Load Balancer

  Correct Answer: AD

• Question 835:

  Which action is consistent with the principle of least privilege in terms of AWS Cloud architecture?

  A. Allow users the minimum access that is needed to do a task.

  B. Prevent managers from accessing important source code.

  C. Provide only the permissions that are needed for users to do their jobs in the current month.

  D. Assign permissions that are based on job titles.

  Correct Answer: C

• Question 836:

  Which AWS services can use AWS WAF to protect against common web exploitations? (Choose two.)

  A. Amazon Route 53

  B. Amazon CloudFront

  C. AWS Transfer Family

  D. AWS Site-to-Site VPN

  E. Amazon API Gateway

  Correct Answer: BE

  AWS WAF can be deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API Gateway, and AWS AppSync. As part of Amazon CloudFront it can be part of your Content Distribution Network (CDN) protecting your resources and content at the Edge locations.

• Question 837:

  An ecommerce company wants to design a highly available application that will be hosted on multiple Amazon EC2 instances.

  How should the company deploy the EC2 instances to meet these requirements?

  A. Across multiple edge locations

  B. Across multiple VPCs

  C. Across multiple Availability Zones

  D. Across multiple AWS accounts

  Correct Answer: C

• Question 838:

  A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud.

  Which of the following are benefits of building this app in the AWS Cloud? (Choose two.)

  A. A large, upfront capital expense and low variable expenses

  B. Increased speed for trying out new projects

  C. Complete control over the physical security of the infrastructure

  D. Flexibility to scale up in minutes as the application becomes popular

  E. Ability to pick the specific data centers that will host the application servers

  Correct Answer: BD

  Option A is incorrect because AWS allows for a low upfront cost and variable expenses, which is the opposite of a large upfront capital expense and low variable expenses.

  Option C is incorrect because AWS follows a shared responsibility model where the physical security of the infrastructure is the responsibility of AWS, while the customer is responsible for securing the applications and data. Therefore, the customer does not have complete control over the physical security of the infrastructure.

  Option E is incorrect because while AWS allows customers to choose the region in which their application is hosted, they cannot pick specific data centers.

• Question 839:

  Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

  A. Route table

  B. AWS Transit Gateway

  C. AWS Global Accelerator

  D. Amazon VPC

  Correct Answer: C

• Question 840:

  A company is designing a new application that will store and retrieve millions of photos and videos.

  Which AWS service or feature can provide the underlying storage at the LOWEST cost?

  A. Amazon EC2 instance store

  B. Amazon Elastic Block Store (Amazon EBS)

  C. Amazon S3

  D. Amazon Simple Queue Service (Amazon SQS)

  Correct Answer: A