Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 831:

  Which AWS service helps developers use loose coupling and reliable messaging between microservices?

  A. Elastic Load Balancing
  B. Amazon Simple notification Service (Amazon SNS)
  C. Amazon CloudFront
  D. Amazon Simple Queue Service (Amazon SQS)
  D. Amazon Simple Queue Service (Amazon SQS)

  ---

  Explanation/Reference:

  D- Amazon SQS is a fully managed message queuing for microservices, distributed systems, and serverless applications.

  Elastic Load Balancing automatically distributes incoming application traffic; it doesn't help with developer work in this context.

  Amazon SNS is used for email and notifications to users, not for developers.

  Amazon CloudFront is a content delivery network (CDN) service built for securely delivering content to customers. It is not used for loose coupling nor microservices.

• Question 832:

  A company wants to use an AWS service to continuously monitor the health of its application endpoints based on proximity to application users. The company also needs to route traffic to healthy Regional endpoints and to improve application

  availability and performance.

  Which service will meet these requirements?

  A. Amazon Inspector
  B. Amazon CloudWatch
  C. AWS Global Accelerator
  D. AWS Cloud Formation
  A. Amazon Inspector

• Question 833:

  A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting Which AWS service should the company use?

  A. Amazon GuardDuty
  B. AWS WAF
  C. AWS Trusted Advisor
  D. Amazon Inspector
  B. AWS WAF

• Question 834:

  A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege. Which AWS service or feature should the company use to enforce this principle?

  A. Security groups
  B. AWS Shield
  C. AWS Global Accelerator
  D. AWS Direct Connect gateway
  A. Security groups

  ---

  Explanation/Reference:

  A ?Security groups control the traffic that is allowed to reach and leave the resources that it is associated with.

  AWS Shield is for DDoS protection.

  AWS Global Accelerator is for global reach.

  AWS Direct Connect is a cloud service that links your network directly to AWS to deliver consistent, low- latency performance.

• Question 835:

  Which AWS service will help protect applications running on AWS from DDoS attacks?

  A. Amazon GuardDuty
  B. AWS WAF
  C. AWS Shield
  D. Amazon Inspector
  C. AWS Shield

  ---

  Explanation/Reference:

  You can use AWS WAF, AWS Shield, and AWS Firewall Manager together to create a comprehensive security solution.

  Use AWS WAF to monitor requests that are forwarded to your web applications and control access to your content.

  Use AWS Shield to help protect against DDoS attacks.

  Use AWS Firewall Manager to set up your firewall rules and apply the rules automatically across accounts and resources, even as new resources are added.

• Question 836:

  What is the total volume of data that can be stored in Amazon S3?

  A. 10 PB
  B. 50 PB
  C. 100 PB
  D. Virtually unlimited
  D. Virtually unlimited

• Question 837:

  Which of the following are security principles in the AWS Well-Architected Framework? (Select TWO.)

  A. Analyze and attribute expenditures
  B. Monitor, alert and audit actions and changes to AWS resources
  C. Deploy globally in minutes
  D. Protect data in transit and at rest
  E. Perform operations as code
  B. Monitor, alert and audit actions and changes to AWS resources
  D. Protect data in transit and at rest

• Question 838:

  Under the AWS shared responsibility model, the security and patching of the guest operating system is the responsibility of:

  A. AWS Support
  B. the customer
  C. AWS Systems Manager
  D. AWS Config
  B. the customer

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

• Question 839:

  Which AWS service or feature is used to send both text and email messages from distributed applications?

  A. Amazon Simple Notification Service (Amazon SNS)
  B. Amazon Simple Email Service (Amazon SES)
  C. Amazon CloudWatch alerts
  D. Amazon Simple Queue Service (Amazon SQS)
  A. Amazon Simple Notification Service (Amazon SNS)

  ---

  Explanation/Reference:

  Amazon Simple Notification Service (Amazon SNS) is a fully managed messaging service for both application-to-application (A2A) and application-to-person (A2P) communication.

  The A2A pub/sub functionality provides topics for high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications. Using Amazon SNS topics, your publisher systems can fanout messages to a large number of subscriber systems including Amazon SQS queues, AWS Lambda functions and HTTPS endpoints, for parallel processing, and Amazon Kinesis Data Firehose. The A2P functionality enables you to send messages to users at scale via SMS, mobile push, and email.

• Question 840:

  A company runs an application in the AWS Cloud. The levels of traffic to the application vary throughout the week. The company wants to increase the reliability of its application at all times, even during times of high traffic. Which combination of steps will meet this requirement? (Choose two.)

  A. Test recovery procedures.
  B. Purchase instances weekly based on the previous week's high traffic points.
  C. Handle software failures automatically.
  D. Scale the application vertically.
  E. Make all changes in the environment manually.
  A. Test recovery procedures.
  C. Handle software failures automatically.

  ---

  Explanation/Reference:

  A. Test recovery procedures: Testing recovery procedures will help identify potential issues and ensure that the application can recover quickly in the event of a failure. This will help reduce downtime and increase the reliability of the application.

  C. Handle software failures automatically: Automating the handling of software failures, such as through the use of automated recovery processes or load balancers, can help ensure that the application continues to run smoothly even during times of high traffic. This can also help reduce the risk of human error, leading to increased reliability.