Amazon CLF-C01 Online Practice Questions and Exam Preparation

Amazon CLF-C01 Online Questions & Answers

• Question 851:

  Which of the following is a recommended design principle of the AWS Well-Architected Framework?

  A. Reduce downtime by making infrastructure changes infrequently and in large increments.
  B. Invest the time to configure infrastructure manually.
  C. Learn to improve from operational failures.
  D. Use monolithic application design for centralization.
  C. Learn to improve from operational failures.

• Question 852:

  Service control policies (SCPs) manage permissions for which of the following?

  A. Availability Zones
  B. AWS Regions
  C. AWS Organizations
  D. Edge locations
  C. AWS Organizations

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

• Question 853:

  Which combination of AWS services or features can a company use to encrypt data in transit and data at rest? (Choose two.)

  A. AWS Lambda
  B. AWS Key Management Service (AWS KMS)
  C. Amazon CloudWatch metrics
  D. AWS Certificate Manager (ACM)
  E. AWS Systems Manager
  B. AWS Key Management Service (AWS KMS)
  D. AWS Certificate Manager (ACM)

• Question 854:

  Which service's PRIMARY purpose is software version control?

  A. Amazon CodeStar
  B. AWS Command Line Interface (AWS CLI)
  C. Amazon Cognito
  D. AWS CodeCommit
  D. AWS CodeCommit

  ---

  Explanation/Reference:

  AWS CodeCommit is a version control service hosted by Amazon Web Services that you can use to privately store and manage assets (such as documents, source code, and binary files) in the cloud. Reference: https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html

• Question 855:

  A company wants to protect its AWS Cloud information systems and assets while performing risk assessment and mitigation tasks Which pillar of the AWS Well Architected framework is supported by these goals?

  A. Reliability
  B. Security
  C. Operational excellence
  D. Performance efficiency
  B. Security

  ---

  Explanation/Reference:

  B. Security is the pillar of the AWS Well-Architected framework that is supported by the goal of protecting a company's AWS Cloud information systems and assets while performing risk assessment and mitigation tasks.

• Question 856:

  A company is looking for a way to encrypt data stored on Amazon S3. Which AWS managed service can be used to help to accomplish this?

  A. AWS Certificate Manager (ACM)
  B. AWS Secrets Manager
  C. AWS Resource Access Manager
  D. AWS Key Management Service (AWS KMS)
  D. AWS Key Management Service (AWS KMS)

  ---

  Explanation/Reference:

  Reference: https://www.nakivo.com/blog/amazon-s3-encryption-configuration-overview/

• Question 857:

  Which of the following is an advantage that the AWS Cloud provides to users?

  A. Users eliminate the need to guess about infrastructure capacity requirements.
  B. Users decrease their variable costs by maintaining sole ownership of IT hardware.
  C. Users maintain control of underlying IT infrastructure hardware.
  D. Users maintain control of operating systems for managed services.
  A. Users eliminate the need to guess about infrastructure capacity requirements.

  ---

  Explanation/Reference:

  Stop guessing capacity ?Eliminate guessing on your infrastructure capacity needs. When you make a capacity decision prior to deploying an application, you often end up either sitting on expensive idle resources or dealing with limited capacity. With cloud computing, these problems go away. You can access as much or as little capacity as you need, and scale up and down as required with only a few minutes' notice.

• Question 858:

  A company website is experiencing DDoS attacks.

  Which AWS service can help protect the company website against these attacks?

  A. AWS Resource Access Manager
  B. AWS Amplify
  C. AWS Shield
  D. Amazon GuardDuty
  C. AWS Shield

  ---

  Explanation/Reference:

  C. AWS Shield- for the prevention of DDOS attacks

• Question 859:

  A company has deployed its IT infrastructure in the AWS Cloud. The company's database must support reads with sub-millisecond latency. Which AWS service will meet this requirement?

  A. Amazon EMR
  B. Amazon RDS
  C. AWS Glue
  D. Amazon ElastiCache
  D. Amazon ElastiCache

• Question 860:

  A company wants to allow full access to an Amazon S3 bucket for a particular user Which element in the S3 bucket policy holds the user details that describe who needs access to the S3 bucket?

  A. Principal
  B. Action
  C. Resource
  D. Statement
  A. Principal